From: Moritz Bunkus <m.bunkus@linet-services.de>
Date: Fri, 26 Sep 2008 08:28:48 +0000 (+0000)
Subject: Attribut "name" HTML-escapen.
X-Git-Tag: release-2.6.0beta2~255
X-Git-Url: http://wagnertech.de/git?a=commitdiff_plain;h=5683190d8d0d040117ec300d306655361408734a;p=kivitendo-erp.git

Attribut "name" HTML-escapen.
---

diff --git a/templates/webpages/ct/form_header_de.html b/templates/webpages/ct/form_header_de.html
index 6102f1273..f93de8ca7 100644
--- a/templates/webpages/ct/form_header_de.html
+++ b/templates/webpages/ct/form_header_de.html
@@ -47,7 +47,7 @@
 
      <tr>
       <th align="right" nowrap>Firmenname</th>
-      <td><input name="name" size="35" maxlength="75" value="[% name %]"></td>
+      <td><input name="name" size="35" maxlength="75" value="[% HTML.escape(name) %]"></td>
      </tr>
 
      <tr>
diff --git a/templates/webpages/ct/form_header_master.html b/templates/webpages/ct/form_header_master.html
index 9c81380e1..ef278a3d5 100644
--- a/templates/webpages/ct/form_header_master.html
+++ b/templates/webpages/ct/form_header_master.html
@@ -47,7 +47,7 @@
 
      <tr>
       <th align="right" nowrap><translate>Company Name</translate></th>
-      <td><input name="name" size="35" maxlength="75" value="[% name %]"></td>
+      <td><input name="name" size="35" maxlength="75" value="[% HTML.escape(name) %]"></td>
      </tr>
 
      <tr>