From: Sven Schöling <s.schoeling@googlemail.com>
Date: Fri, 26 Nov 2021 08:50:37 +0000 (+0100)
Subject: ca: escape script in form
X-Git-Tag: kivitendo-mebil_0.1-0~10^2~2^2~272
X-Git-Url: http://wagnertech.de/git?a=commitdiff_plain;h=63f70f532aaae932e785055fd089d336549ba277;p=kivitendo-erp.git

ca: escape script in form
---

diff --git a/templates/webpages/ca/list.html b/templates/webpages/ca/list.html
index 964790c5b..c0392c286 100644
--- a/templates/webpages/ca/list.html
+++ b/templates/webpages/ca/list.html
@@ -4,7 +4,7 @@
 [% USE LxERP %]
 <h1>[% title | html %]</h1>
 
-<form method=post action="[% script %]">
+<form method=post action="[% script | html %]">
 
 [% L.hidden_tag('accno', accno) %]
 [% L.hidden_tag('description', description) %]