From: Ivan Kohler <ivan@freeside.biz>
Date: Tue, 26 Mar 2013 23:52:22 +0000 (-0700)
Subject: fix XSS
X-Git-Url: http://git.freeside.biz/gitweb/?p=freeside.git;a=commitdiff_plain;h=092d75e50a900003904f8e400d6d102ba5bd16f9

fix XSS
---

diff --git a/httemplate/edit/bulk-part_pkg.html b/httemplate/edit/bulk-part_pkg.html
index 751bf7e5d..a1c6f0c9b 100644
--- a/httemplate/edit/bulk-part_pkg.html
+++ b/httemplate/edit/bulk-part_pkg.html
@@ -12,7 +12,7 @@
 The following packages will be changed:<BR>
 % foreach my $pkgpart (sort keys(%part_pkg)) {
 <INPUT TYPE="hidden" NAME="pkgpart" VALUE="<% $pkgpart %>">
-<% $part_pkg{$pkgpart}->pkg_comment %><BR>
+<% $part_pkg{$pkgpart}->pkg_comment |h %><BR>
 % }
 </DIV>
 <BR>