[freeside-commits] branch master updated. 261197360f2d28579d59252eb4c249182ac383fa

[Ivan]

The branch, master has been updated
       via  261197360f2d28579d59252eb4c249182ac383fa (commit)
      from  fc79c36724d40e1de1d307e209078737928544fb (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 261197360f2d28579d59252eb4c249182ac383fa
Author: Ivan Kohler <ivan at freeside.biz>
Date:   Fri Dec 4 19:14:29 2015 -0800

    fix HTML escaping, RT#34237

diff --git a/rt/share/html/Elements/CalendarSlotSchedule b/rt/share/html/Elements/CalendarSlotSchedule
index 2513471..943c8ba 100644
--- a/rt/share/html/Elements/CalendarSlotSchedule
+++ b/rt/share/html/Elements/CalendarSlotSchedule
@@ -58,7 +58,7 @@
 %                   #false laziness w/xmlhttp-ticket-update.html
 %                   FS::sched_avail::pretty_time($starts). '-'.
 %                   FS::sched_avail::pretty_time($due).
-%                   ': '. encode_entities($cust_main[0]->_FreesideURILabel);
+%                   ': '. $cust_main[0]->_FreesideURILabel;
 %                   #'install for custname XX miles away'; #XXX placeholder/more
 %       $draggable_ticketid = $id;
 %       $draggable_length = $due - $starts;
@@ -128,7 +128,7 @@
 %       }
 %
 %     }
-    ><% $content %></td>
+    ><% $content |h %></td>
     <SCRIPT TYPE="text/javascript">
 
       $('#<% $td_id %>').data('username', "<% $username %>");

-----------------------------------------------------------------------

Summary of changes:
 rt/share/html/Elements/CalendarSlotSchedule |    4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)