drafts: html escaping für Vorlagen mit single quotes

[kivitendo-erp.git] / templates / webpages / drafts / form.html

diff --git a/templates/webpages/drafts/form.html b/templates/webpages/drafts/form.html
index 031b0a1..4777a7a 100644 (file)
--- a/templates/webpages/drafts/form.html
+++ b/templates/webpages/drafts/form.html
@@ -12,7 +12,7 @@
 [%- END %]
 
 [% L.hidden_tag('', FORM.id, id='new_draft_id') %]
-[% 'Description' | $T8 %]: <input id='new_draft_description' value='[% FORM.description | html %]'>
+[% 'Description' | $T8 %]: [% L.input_tag('new_draft_description', FORM.description) %]
 [% L.button_tag('kivi.Draft.save("' _ HTML.escape(SELF.module) _ '", "' _ HTML.escape(SELF.submodule) _ '")', LxERP.t8('Save draft')) %]
 
 [%- IF drafts_list.size %]