X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=templates%2Fwebpages%2Fic%2Fassembly_row.html;h=401b54a06b7d0ef8b62bb73a9c09df0b1fc7f5d1;hb=4486e3bc8eb00c37cf8029e663eb94b4b9c5346a;hp=c7f8d83d5827792b0d4dbe4e730d0b8a67436b69;hpb=2d3f862b7af94f31860dd264eef7c1bc7de7eae2;p=kivitendo-erp.git

diff --git a/templates/webpages/ic/assembly_row.html b/templates/webpages/ic/assembly_row.html
index c7f8d83d5..401b54a06 100644
--- a/templates/webpages/ic/assembly_row.html
+++ b/templates/webpages/ic/assembly_row.html
@@ -1,5 +1,7 @@
 [%- USE T8 %]
 [%- USE LxERP %]
+[%- USE HTML %]
+[%- USE L %]
   <tr class=listheading>
    <th class=listheading>[% 'Individual Items' | $T8 %]</th>
   </tr>
@@ -16,10 +18,14 @@
      <tr>
  [%- FOREACH col = COLUMNS %]
   [%- SET rcol = row.$col %]
-      <td[% ' align=' _ rcol.align IF rcol.align %]>[%- rcol.data %]</td>
+  [%- IF rcol.escape %]
+      <td[% ' align=' _ rcol.align IF rcol.align %]>[%- HTML.escape(rcol.data) %]</td>
+  [%- ELSE %]
+      <td[% ' align=' _ rcol.align IF rcol.align %]>[%- IF rcol.link %][% L.link(rcol.link, rcol.data) %][% ELSE %][% rcol.data %][% END %]</td>
+  [%- END %]
  [%- END %]
  [%- FOREACH hidden = row.hiddens %]
-      <input type=hidden name="[% hidden.name %]" value="[% hidden.value %]">
+      <input type=hidden name="[% HTML.escape(hidden.name) %]" value="[% HTML.escape(hidden.value) %]">
  [%- END %]
      </tr>
 [%- END %]