[freeside-commits] branch FREESIDE_2_3_BRANCH updated. 7aeaf8748ca66ffb4f49dd2c2ab3f796b0bdbc5a

[Ivan]

The branch, FREESIDE_2_3_BRANCH has been updated
       via  7aeaf8748ca66ffb4f49dd2c2ab3f796b0bdbc5a (commit)
      from  77222877e31c59d9e9b45efb0655bc57d6448bb5 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 7aeaf8748ca66ffb4f49dd2c2ab3f796b0bdbc5a
Author: Ivan Kohler <ivan at freeside.biz>
Date:   Fri Jun 7 23:42:01 2013 -0700

    fix XSS

diff --git a/httemplate/elements/search-cust_main.html b/httemplate/elements/search-cust_main.html
index e8c645e..ba6a479 100644
--- a/httemplate/elements/search-cust_main.html
+++ b/httemplate/elements/search-cust_main.html
@@ -19,7 +19,7 @@ Example:
        NAME = "<% $field %>_search"
        ID   = "<% $field %>_search"
        SIZE = "32"
-       VALUE="<% $cust_main ? $cust_main->name : '(cust #, name or company)' %>"
+       VALUE="<% $cust_main ? $cust_main->name : '(cust #, name or company)' |h %>"
        onFocus="clearhint_<% $field %>_search(this);"
        onClick="clearhint_<% $field %>_search(this);"
        onChange="smart_<% $field %>_search(this);"

-----------------------------------------------------------------------

Summary of changes:
 httemplate/elements/search-cust_main.html |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)