X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=templates%2Fwebpages%2Fct%2Fform_footer_de.html;h=8f9c079f31f4f3ef0bf4d654cec1cbf60955f306;hb=42ed89f33e7f38dcf9bba8983a070e59b5b61a47;hp=0269dfad04fe6756b5d83c01133b1fe2e89e1c3f;hpb=eeae6c905c736c75f4debd68af7840a4444caa80;p=kivitendo-erp.git

diff --git a/templates/webpages/ct/form_footer_de.html b/templates/webpages/ct/form_footer_de.html
index 0269dfad0..8f9c079f3 100644
--- a/templates/webpages/ct/form_footer_de.html
+++ b/templates/webpages/ct/form_footer_de.html
@@ -1,29 +1,33 @@
+[% USE HTML %]
 
-<input name=id type=hidden id=cvid value=[% id %]>
-<input name=business_save type=hidden value="[% selectbusiness %]">
-<input name=title_save type=hidden value="[% title %]">
+<input name="id" type="hidden" id="cvid" value="[% HTML.escape(id) %]">
+<input name="business_save" type="hidden" value="[% HTML.escape(selectbusiness) %]">
+<input name="title_save" type="hidden" value="[% HTML.escape(title) %]">
 
-<input type=hidden name=callback value="[% callback %]">
-<input type=hidden name=db id=db value=[% db %]>
+<input type="hidden" name="callback" value="[% HTML.escape(callback) %]">
+<input type="hidden" name="db" id="db" value="[% HTML.escape(db) %]">
 
 <br>
-  <input class=submit type=submit name=action accesskey="s" value="Speichern">
-  <input class=submit type=submit name=action accesskey="s" value="Speichern und schließen">
-  <input class=submit type=submit name=action value=" [% IF is_cumstomer %]Speichern und Debitorenbuchung erfassen[% ELSE %]Speichern und Kreditorenbuchung erfassen[% END %]">
-  <input class=submit type=submit name=action value="Speichern und Rechnung erfassen">
-  <input class=submit type=submit name=action value="Speichern und Auftrag erfassen">
-  <input class=submit type=submit name=action value="[% IF is_customer %]Speichern und Angebot[% ELSE %]Speichern und Lieferantenanfrage[% END %]">
+  <input class="submit" type="submit" name="action" accesskey="s" value="Speichern">
+  <input class="submit" type="submit" name="action" accesskey="s" value="Speichern und schließen">
+  <input class="submit" type="submit" name="action" value="[% IF is_cumstomer %]Speichern und Debitorenbuchung erfassen[% ELSE %]Speichern und Kreditorenbuchung erfassen[% END %]">
+  <input class="submit" type="submit" name="action" value="Speichern und Rechnung erfassen">
+  <input class="submit" type="submit" name="action" value="Speichern und Auftrag erfassen">
+  <input class="submit" type="submit" name="action" value="[% IF is_customer %]Speichern und Angebot[% ELSE %]Speichern und Lieferantenanfrage[% END %]">
 [%- IF id AND is_orphaned %]
-  <input class=submit type=submit name=action value="Löschen">
+  <input class="submit" type="submit" name="action" value="Löschen">
 [%- END %]
 [%- IF id %]
-  <input type="button" class="submit" onclick="set_history_window([% id %]);" name="history" id="history" value="Historie">
+  <input type="button" class="submit" onclick="set_history_window([% HTML.escape(id) %]);" name="history" id="history" value="Historie">
 [%- END %]
 
   </form>
-<script type="text/javascript">
-//Start Tab Content script for UL with id="maintab" Separate multiple ids each with a comma.
-initializetabcontent("maintab")
-</script>
+
+ <script type="text/javascript">
+  <!--
+      //Start Tab Content script for UL with id="maintab".
+      initializetabcontent("maintab");
+    -->
+ </script>
 </body>
 </html>