From: Jan Büren <jan@kivitendo-premium.de>
Date: Wed, 12 Feb 2014 12:18:23 +0000 (+0100)
Subject: HTML korrekt für DropDown Zahlungsverkehr escapen
X-Git-Tag: release-3.1.0rc1~21
X-Git-Url: http://wagnertech.de/git?a=commitdiff_plain;h=1ddb5731706ba6bd23eb831d0c79bdda8d503458;p=kivitendo-erp.git

HTML korrekt für DropDown Zahlungsverkehr escapen
fixt: #2450
---

diff --git a/bin/mozilla/cp.pl b/bin/mozilla/cp.pl
index 7daa8883a..8632da99c 100644
--- a/bin/mozilla/cp.pl
+++ b/bin/mozilla/cp.pl
@@ -76,7 +76,8 @@ sub payment {
     $form->{"select$form->{vc}"} .= "<option value=\"\"></option>\n";
     # s.o. jb 12.10.2010
     $form->{"$form->{vc}_id"} = $form->{"all_$form->{vc}"}->[0]->{id};
-    map { $form->{"select$form->{vc}"} .= "<option value=\"$_->{name}--$_->{id}\">$_->{name}--$_->{id}</option>\n" }
+    # hotfix for 2450. TODO remove legacy code and use L
+    map { $form->{"select$form->{vc}"} .= "<option value=\"$_->{name}--$_->{id}\">" . H($_->{name}) . "--$_->{id}</option>\n" }
       @{ $form->{"all_$form->{vc}"} };
   }
   CP->paymentaccounts(\%myconfig, \%$form);