[freeside-commits] branch FREESIDE_2_3_BRANCH updated. de1f3ef204d75ae89d81e7f7177ac1b740c6abc7

[Ivan]

The branch, FREESIDE_2_3_BRANCH has been updated
       via  de1f3ef204d75ae89d81e7f7177ac1b740c6abc7 (commit)
      from  44701d76a4394ef735d67ad4aa7cce2ffc65f26a (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit de1f3ef204d75ae89d81e7f7177ac1b740c6abc7
Author: Ivan Kohler <ivan at freeside.biz>
Date:   Thu Mar 28 17:49:41 2013 -0700

    fix XSS

diff --git a/httemplate/search/cust_main.cgi b/httemplate/search/cust_main.cgi
index 4504121..224166b 100755
--- a/httemplate/search/cust_main.cgi
+++ b/httemplate/search/cust_main.cgi
@@ -268,7 +268,7 @@
 %      my $pkg_rowspan = shift @pkg_rowspans;
 
         <% $n1 %><TD CLASS="grid" BGCOLOR="<% $bgcolor %>"  ROWSPAN="<% $pkg_rowspan%>">
-            <A HREF="<% $pkgview %>"><FONT SIZE=-1><% $pkg_comment %></FONT></A>
+            <A HREF="<% $pkgview %>"><FONT SIZE=-1><% $pkg_comment |h %></FONT></A>
         </TD>
 
 %       my $n2 = '';

-----------------------------------------------------------------------

Summary of changes:
 httemplate/search/cust_main.cgi |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)