[freeside-commits] branch FREESIDE_4_BRANCH updated. bd2049875ec183b1568bc18474878ff17e56aebf

[Ivan]

The branch, FREESIDE_4_BRANCH has been updated
       via  bd2049875ec183b1568bc18474878ff17e56aebf (commit)
      from  323d183847043e03b206a1d09cdd2f7c24845c73 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit bd2049875ec183b1568bc18474878ff17e56aebf
Author: Ivan Kohler <ivan at freeside.biz>
Date:   Fri Dec 4 19:14:31 2015 -0800

    fix HTML escaping, RT#34237

diff --git a/rt/share/html/Elements/CalendarSlotSchedule b/rt/share/html/Elements/CalendarSlotSchedule
index 2513471..943c8ba 100644
--- a/rt/share/html/Elements/CalendarSlotSchedule
+++ b/rt/share/html/Elements/CalendarSlotSchedule
@@ -58,7 +58,7 @@
 %                   #false laziness w/xmlhttp-ticket-update.html
 %                   FS::sched_avail::pretty_time($starts). '-'.
 %                   FS::sched_avail::pretty_time($due).
-%                   ': '. encode_entities($cust_main[0]->_FreesideURILabel);
+%                   ': '. $cust_main[0]->_FreesideURILabel;
 %                   #'install for custname XX miles away'; #XXX placeholder/more
 %       $draggable_ticketid = $id;
 %       $draggable_length = $due - $starts;
@@ -128,7 +128,7 @@
 %       }
 %
 %     }
-    ><% $content %></td>
+    ><% $content |h %></td>
     <SCRIPT TYPE="text/javascript">
 
       $('#<% $td_id %>').data('username', "<% $username %>");

-----------------------------------------------------------------------

Summary of changes:
 rt/share/html/Elements/CalendarSlotSchedule |    4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)