fix html quoting of export options

diff --git a/httemplate/browse/part_export.cgi b/httemplate/browse/part_export.cgi
index 76662e0..79c57ae 100755 (executable)
--- a/httemplate/browse/part_export.cgi
+++ b/httemplate/browse/part_export.cgi
@@ -26,7 +26,7 @@ function part_export_areyousure(href) {
       <%= itable() %>
       <% my %opt = $part_export->options;
          foreach my $opt ( keys %opt ) { %>
       <%= itable() %>
       <% my %opt = $part_export->options;
          foreach my $opt ( keys %opt ) { %>

-           <TR><TD><%= $opt %></TD><TD><%= $opt{$opt} %></TD></TR>
+           <TR><TD><%= $opt %></TD><TD><%= encode_entities($opt{$opt}) %></TD></TR>

       <% } %>
       </TABLE>
     </TD>
       <% } %>
       </TABLE>
     </TD>