stale leftovers from XSSmas

diff --git a/httemplate/elements/errorpage.html b/httemplate/elements/errorpage.html
index 17b0dcf..76a0bf3 100644 (file)
--- a/httemplate/elements/errorpage.html
+++ b/httemplate/elements/errorpage.html
@@ -2,7 +2,7 @@
 
 % while (@_) {
 
-<P><FONT SIZE="+1" COLOR="#ff0000"><B><% shift %></B></FONT>
+<P><FONT SIZE="+1" COLOR="#ff0000"><% shift |h %></FONT>
 
 %}
 

diff --git a/httemplate/elements/tr-select-reason.html b/httemplate/elements/tr-select-reason.html
index 2639a9d..4051e7d 100755 (executable)
--- a/httemplate/elements/tr-select-reason.html
+++ b/httemplate/elements/tr-select-reason.html
@@ -86,7 +86,7 @@
   <TD ALIGN="right">
     <P id="new<% $id %>Label" style="display:<% $display %>">New Reason</P>
   </TD>
-  <TD><INPUT id="new<% $id %>" name="new<% $name %>" type="text" value="<% $init_newreason %>" "<% $disabled %>" style="display:<% $display %>"></TD>
+  <TD><INPUT id="new<% $id %>" name="new<% $name %>" type="text" value="<% $init_newreason |h %>" "<% $disabled %>" style="display:<% $display %>"></TD>
 </TR>
 
 <%init>