[freeside-commits] branch master updated. c72a0848224b544426eddec7c63186a5de04280e

[Ivan]

The branch, master has been updated
       via  c72a0848224b544426eddec7c63186a5de04280e (commit)
      from  46fe3dbcb3ca97d1f3c70d49351846cf0ab6461d (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit c72a0848224b544426eddec7c63186a5de04280e
Author: Ivan Kohler <ivan at freeside.biz>
Date:   Mon Apr 25 11:02:36 2016 -0700

    xss

diff --git a/httemplate/view/cust_main.cgi b/httemplate/view/cust_main.cgi
index 3cd7d2b..fac126f 100755
--- a/httemplate/view/cust_main.cgi
+++ b/httemplate/view/cust_main.cgi
@@ -225,16 +225,19 @@ my $cust_main = qsearchs( {
 });
 die "Customer not found!" unless $cust_main;
 
-my $title = mt("Customer").' #'. $cust_main->display_custnum. ': '.
-            encode_entities($cust_main->name);
+my $title = mt("Customer").' #'. $cust_main->display_custnum. ': ';
+my $title_noescape = $title. encode_entities($cust_main->name);
+$title .= $cust_main->name;
 
 if ( $curuser->num_agents ) {
-  $title = encode_entities($cust_main->agent->agent). " $title";
+  $title_noescape =
+    encode_entities($cust_main->agent->agent). " $title_noescape";
+  $title = $cust_main->agent->agent. " $title";
 }
 
 my $status = $cust_main->status_label;
 $status .= ' (Cancelled)' if $cust_main->is_status_delay_cancel;
-my $title_noescape = $title. ' (<B><FONT COLOR="#'. $cust_main->statuscolor. '">'. $status.  '</FONT></B>)';
+$title_noescape .= ' (<B><FONT COLOR="#'. $cust_main->statuscolor. '">'. $status.  '</FONT></B>)';
 $title .= " ($status)";
 
 #false laziness w/pref/pref.html and Conf.pm (cust_main-default_view)

-----------------------------------------------------------------------

Summary of changes:
 httemplate/view/cust_main.cgi |   11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)