[freeside-commits] branch FREESIDE_4_BRANCH updated. 7992485be4c1f3083486760203ad8704a7e9f38d

[Ivan]

The branch, FREESIDE_4_BRANCH has been updated
       via  7992485be4c1f3083486760203ad8704a7e9f38d (commit)
      from  be109bfec54d7d87ce8a85cb2d9941eb7b551554 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 7992485be4c1f3083486760203ad8704a7e9f38d
Author: Ivan Kohler <ivan at freeside.biz>
Date:   Mon Jun 29 18:59:35 2015 -0700

    xss

diff --git a/httemplate/browse/cust_attachment.html b/httemplate/browse/cust_attachment.html
index 9d62e56..f81ec1b 100755
--- a/httemplate/browse/cust_attachment.html
+++ b/httemplate/browse/cust_attachment.html
@@ -101,7 +101,7 @@ my $orderby = $cgi->param('orderby') || 'custnum';
 
 my $sub_cust = sub {
   my $c = qsearchs('cust_main', { custnum => shift->custnum } );
-  return $c ? $c->name : '<FONT COLOR="red"><B>(not found)</B></FONT>';
+  return $c ? encode_entities($c->name) : '<FONT COLOR="red"><B>(not found)</B></FONT>';
 };
 
 my $sub_date = sub {

-----------------------------------------------------------------------

Summary of changes:
 httemplate/browse/cust_attachment.html |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)