From: ivan <ivan>
Date: Sun, 13 Jan 2008 20:50:19 +0000 (+0000)
Subject: stale leftovers from XSSmas
X-Git-Tag: TRIXBOX_2_6~114
X-Git-Url: http://git.freeside.biz/gitweb/?p=freeside.git;a=commitdiff_plain;h=ec73e6774dd54d085d836f7da2ae772d2cfefee2

stale leftovers from XSSmas
---

diff --git a/httemplate/elements/errorpage.html b/httemplate/elements/errorpage.html
index 17b0dcf62..76a0bf32e 100644
--- a/httemplate/elements/errorpage.html
+++ b/httemplate/elements/errorpage.html
@@ -2,7 +2,7 @@
 
 % while (@_) {
 
-<P><FONT SIZE="+1" COLOR="#ff0000"><B><% shift %></B></FONT>
+<P><FONT SIZE="+1" COLOR="#ff0000"><% shift |h %></FONT>
 
 %}
 
diff --git a/httemplate/elements/tr-select-reason.html b/httemplate/elements/tr-select-reason.html
index 2639a9d5c..4051e7d20 100755
--- a/httemplate/elements/tr-select-reason.html
+++ b/httemplate/elements/tr-select-reason.html
@@ -86,7 +86,7 @@
   <TD ALIGN="right">
     <P id="new<% $id %>Label" style="display:<% $display %>">New Reason</P>
   </TD>
-  <TD><INPUT id="new<% $id %>" name="new<% $name %>" type="text" value="<% $init_newreason %>" "<% $disabled %>" style="display:<% $display %>"></TD>
+  <TD><INPUT id="new<% $id %>" name="new<% $name %>" type="text" value="<% $init_newreason |h %>" "<% $disabled %>" style="display:<% $display %>"></TD>
 </TR>
 
 <%init>