From: Ivan Kohler <ivan@freeside.biz>
Date: Thu, 5 Jul 2012 23:29:48 +0000 (-0700)
Subject: fix escaping in coordinate links
X-Git-Url: http://git.freeside.biz/gitweb/?p=freeside.git;a=commitdiff_plain;h=d18cf10c30afa6dce46c31cb87a1733202518cb8

fix escaping in coordinate links
---

diff --git a/httemplate/elements/coord-links.html b/httemplate/elements/coord-links.html
index 60882deed..02a224a00 100644
--- a/httemplate/elements/coord-links.html
+++ b/httemplate/elements/coord-links.html
@@ -3,7 +3,7 @@
 <& /elements/popup_link.html,
      'action'      => $p. 'view/map.html?'. $query,
      'label'       => mt('map'),
-     'actionlabel' => uri_escape_utf8($name),
+     'actionlabel' => $js_name,
      'width'       => 763,
      'height'      => 575,
      #'color'
@@ -13,7 +13,7 @@
   <& /elements/popup_link.html,
       'action'      => $p. "view/directions.html?origin=$origin;". $query,
       'label'       => mt('directions'),
-      'actionlabel' => uri_escape_utf8($name),
+      'actionlabel' => $js_name,
       'width'       => 763,
       'height'      => 575,
   &>
@@ -29,6 +29,12 @@ my $query = 'name='. uri_escape_utf8($name).
             ';lat='. $latitude.
             ';lon='. $longitude;
 
+my $js_name = $name;
+$js_name =~ s/[<>"]/ /g;
+$m->interp->apply_escapes($js_name, 'js_string');
+$js_name =~ s/^'//;
+$js_name =~ s/'$//;
+
 my $origin;
 #for directions link
 if ( $agentnum =~ /^\d+$/ ) {