From ec73e6774dd54d085d836f7da2ae772d2cfefee2 Mon Sep 17 00:00:00 2001
From: ivan <ivan>
Date: Sun, 13 Jan 2008 20:50:19 +0000
Subject: [PATCH] stale leftovers from XSSmas

---
 httemplate/elements/errorpage.html        | 2 +-
 httemplate/elements/tr-select-reason.html | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/httemplate/elements/errorpage.html b/httemplate/elements/errorpage.html
index 17b0dcf62..76a0bf32e 100644
--- a/httemplate/elements/errorpage.html
+++ b/httemplate/elements/errorpage.html
@@ -2,7 +2,7 @@
 
 % while (@_) {
 
-<P><FONT SIZE="+1" COLOR="#ff0000"><B><% shift %></B></FONT>
+<P><FONT SIZE="+1" COLOR="#ff0000"><% shift |h %></FONT>
 
 %}
 
diff --git a/httemplate/elements/tr-select-reason.html b/httemplate/elements/tr-select-reason.html
index 2639a9d5c..4051e7d20 100755
--- a/httemplate/elements/tr-select-reason.html
+++ b/httemplate/elements/tr-select-reason.html
@@ -86,7 +86,7 @@
   <TD ALIGN="right">
     <P id="new<% $id %>Label" style="display:<% $display %>">New Reason</P>
   </TD>
-  <TD><INPUT id="new<% $id %>" name="new<% $name %>" type="text" value="<% $init_newreason %>" "<% $disabled %>" style="display:<% $display %>"></TD>
+  <TD><INPUT id="new<% $id %>" name="new<% $name %>" type="text" value="<% $init_newreason |h %>" "<% $disabled %>" style="display:<% $display %>"></TD>
 </TR>
 
 <%init>
-- 
2.11.0