[freeside-commits] branch master updated. d0002d9941b90fc390bfc4c3382fd092cd5a3594

[Ivan]

The branch, master has been updated
       via  d0002d9941b90fc390bfc4c3382fd092cd5a3594 (commit)
      from  05344566bd3f5443a864eedbcee8608483a01179 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit d0002d9941b90fc390bfc4c3382fd092cd5a3594
Author: Ivan Kohler <ivan at freeside.biz>
Date:   Mon Dec 17 12:24:48 2012 -0800

    fix XSS

diff --git a/httemplate/search/customer_accounting_summary.html b/httemplate/search/customer_accounting_summary.html
index e01b8cd..0e9e24f 100644
--- a/httemplate/search/customer_accounting_summary.html
+++ b/httemplate/search/customer_accounting_summary.html
@@ -107,7 +107,7 @@ as <A HREF="<% "$myself;_type=xls" %>">Excel spreadsheet</A><BR>
 %     my $style = '';
 %     $style .= " rowspan=".$cell->{rowspan} if $cell->{rowspan} > 1;
 %     $style .= " colspan=".$cell->{colspan} if $cell->{colspan} > 1;
-      <<%$td%><%$style%>><% $cell->{value} %></<%$td%>>
+      <<%$td%><%$style%>><% $cell->{value} |h %></<%$td%>>
 %   }
   </tr>
 % }

-----------------------------------------------------------------------

Summary of changes:
 httemplate/search/customer_accounting_summary.html |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)