From d18cf10c30afa6dce46c31cb87a1733202518cb8 Mon Sep 17 00:00:00 2001 From: Ivan Kohler Date: Thu, 5 Jul 2012 16:29:48 -0700 Subject: [PATCH] fix escaping in coordinate links --- httemplate/elements/coord-links.html | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/httemplate/elements/coord-links.html b/httemplate/elements/coord-links.html index 60882deed..02a224a00 100644 --- a/httemplate/elements/coord-links.html +++ b/httemplate/elements/coord-links.html @@ -3,7 +3,7 @@ <& /elements/popup_link.html, 'action' => $p. 'view/map.html?'. $query, 'label' => mt('map'), - 'actionlabel' => uri_escape_utf8($name), + 'actionlabel' => $js_name, 'width' => 763, 'height' => 575, #'color' @@ -13,7 +13,7 @@ <& /elements/popup_link.html, 'action' => $p. "view/directions.html?origin=$origin;". $query, 'label' => mt('directions'), - 'actionlabel' => uri_escape_utf8($name), + 'actionlabel' => $js_name, 'width' => 763, 'height' => 575, &> @@ -29,6 +29,12 @@ my $query = 'name='. uri_escape_utf8($name). ';lat='. $latitude. ';lon='. $longitude; +my $js_name = $name; +$js_name =~ s/[<>"]/ /g; +$m->interp->apply_escapes($js_name, 'js_string'); +$js_name =~ s/^'//; +$js_name =~ s/'$//; + my $origin; #for directions link if ( $agentnum =~ /^\d+$/ ) { -- 2.11.0