[freeside-commits] freeside/httemplate/view/cust_main notes.html, 1.9, 1.10

[Mark Wells]

Update of /home/cvs/cvsroot/freeside/httemplate/view/cust_main
In directory wavetail.420.am:/tmp/cvs-serv22689/httemplate/view/cust_main

Modified Files:
	notes.html 
Log Message:
RT#6226: security fix for customer notes

Index: notes.html
===================================================================
RCS file: /home/cvs/cvsroot/freeside/httemplate/view/cust_main/notes.html,v
retrieving revision 1.9
retrieving revision 1.10
diff -u -w -d -r1.9 -r1.10
--- notes.html	16 Mar 2010 02:52:32 -0000	1.9
+++ notes.html	25 Mar 2010 01:37:19 -0000	1.10
@@ -53,7 +53,7 @@
         &nbsp;<% $note->otaker%>
       </TD>
       <TD CLASS="grid" BGCOLOR="<% $bgcolor %>">
-        &nbsp;<%$note->comments%>
+        &nbsp;<% $note->comments | defang %>
       </TD>
 % if($edit) {
       <TD CLASS="grid" BGCOLOR="<% $bgcolor %>"><% $edit %></TD>
@@ -67,6 +67,8 @@
 % }
 <%init>
 
+use HTML::Defang;
+
 my $conf = new FS::Conf;
 my $curuser = $FS::CurrentUser::CurrentUser;