From: Ivan Kohler <ivan@freeside.biz>
Date: Sat, 5 Dec 2015 03:14:29 +0000 (-0800)
Subject: fix HTML escaping, RT#34237
X-Git-Url: http://git.freeside.biz/gitweb/?p=freeside.git;a=commitdiff_plain;h=8ed14c4f01f47c35a4a21e2daa6e642d51a7270c

fix HTML escaping, RT#34237
---

diff --git a/rt/share/html/Elements/CalendarSlotSchedule b/rt/share/html/Elements/CalendarSlotSchedule
index 632fabba3..bf66dcae5 100644
--- a/rt/share/html/Elements/CalendarSlotSchedule
+++ b/rt/share/html/Elements/CalendarSlotSchedule
@@ -57,7 +57,7 @@
 %                   #false laziness w/xmlhttp-ticket-update.html
 %                   FS::sched_avail::pretty_time($starts). '-'.
 %                   FS::sched_avail::pretty_time($due).
-%                   ': '. encode_entities($cust_main[0]->_FreesideURILabel);
+%                   ': '. $cust_main[0]->_FreesideURILabel;
 %                   #'install for custname XX miles away'; #XXX placeholder/more
 %       $draggable_ticketid = $id;
 %       $draggable_length = $due - $starts;
@@ -126,7 +126,7 @@
 %       }
 %
 %     }
-    ><% $content %></td>
+    ><% $content |h %></td>
     <SCRIPT TYPE="text/javascript">
 
       $('#<% $td_id %>').data('username', "<% $username %>");