X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=templates%2Fwebpages%2Fct%2Fform_footer_de.html;h=b8b9aaeaf1ef6d0dfec9eaa263c55dbca2ae89c2;hb=cd92cf1c19785cdcd5812735185676c9ad982175;hp=2d1955b7e025956b05f765b513813d14488250b5;hpb=8c7e44938a661e035f62840e1e177353240ace5d;p=kivitendo-erp.git

diff --git a/templates/webpages/ct/form_footer_de.html b/templates/webpages/ct/form_footer_de.html
index 2d1955b7e..b8b9aaeaf 100644
--- a/templates/webpages/ct/form_footer_de.html
+++ b/templates/webpages/ct/form_footer_de.html
@@ -1,29 +1,41 @@
+[% USE HTML %]
 
-<input name=id type=hidden id=cvid value=[% id %]>
-<input name=business_save type=hidden value="[% selectbusiness %]">
-<input name=title_save type=hidden value="[% title %]">
+<input name="id" type="hidden" id="cvid" value="[% HTML.escape(id) %]">
+<input name="business_save" type="hidden" value="[% HTML.escape(selectbusiness) %]">
+<input name="title_save" type="hidden" value="[% HTML.escape(title) %]">
 
-<input type=hidden name=callback value="[% callback %]">
-<input type=hidden name=db id=db value=[% db %]>
+<input type="hidden" name="callback" value="[% HTML.escape(callback) %]">
+<input type="hidden" name="db" id="db" value="[% HTML.escape(db) %]">
 
 <br>
-  <input class=submit type=submit name=action accesskey="s" value="Speichern">
-  <input class=submit type=submit name=action accesskey="s" value="Speichern und schließen">
-  <input class=submit type=submit name=action value=" [% IF is_cumstomer %]Speichern und Debitorenbuchung erfassen[% ELSE %]Speichern und Kreditorenbuchung erfassen[% END %]">
-  <input class=submit type=submit name=action value="Speichern und Rechnung erfassen">
-  <input class=submit type=submit name=action value="Speichern und Auftrag erfassen">
-  <input class=submit type=submit name=action value="[% IF is_customer %]Speichern und Angebot[% ELSE %]Speichern und Lieferantenanfrage[% END %]">
+  <input class="submit" type="submit" name="action" accesskey="s" value="Speichern">
+  <input class="submit" type="submit" name="action" accesskey="s" value="Speichern und schließen">
+  [%- IF is_cumstomer %]
+  <input class="submit" type="submit" name="action" value="Speichern und Debitorenbuchung erfassen">
+  [%- ELSE %]
+  <input class="submit" type="submit" name="action" value="Speichern und Kreditorenbuchung erfassen">
+  [%- END %]
+  <input class="submit" type="submit" name="action" value="Speichern und Rechnung erfassen">
+  <input class="submit" type="submit" name="action" value="Speichern und Auftrag erfassen">
+  [%- IF is_customer %]
+  <input class="submit" type="submit" name="action" value="Speichern und Angebot">
+  [%- ELSE %]
+  <input class="submit" type="submit" name="action" value="Speichern und Lieferantenanfrage">
+  [%- END %]
 [%- IF id AND is_orphaned %]
-  <input class=submit type=submit name=action value="Löschen">
+  <input class="submit" type="submit" name="action" value="Löschen">
 [%- END %]
 [%- IF id %]
-  <input type=button class=submit onclick=set_history_window([% id %]); name=history id=history value=Historie>|;
+  <input type="button" class="submit" onclick="set_history_window([% HTML.escape(id) %]);" name="history" id="history" value="Historie">
 [%- END %]
 
   </form>
-<script type="text/javascript">
-//Start Tab Content script for UL with id="maintab" Separate multiple ids each with a comma.
-initializetabcontent("maintab")
-</script>
+
+ <script type="text/javascript">
+  <!--
+      //Start Tab Content script for UL with id="maintab".
+      initializetabcontent("maintab");
+    -->
+ </script>
 </body>
 </html>