From: Sven Schöling <s.schoeling@googlemail.com>
Date: Fri, 26 Nov 2021 09:08:53 +0000 (+0100)
Subject: ct: db in template escapen
X-Git-Tag: kivitendo-mebil_0.1-0~10^2~2^2~273
X-Git-Url: http://wagnertech.de/git?a=commitdiff_plain;h=6ecf8c0d3ccc63c30dbe174b387018a5454607b1;p=kivitendo-erp.git

ct: db in template escapen
---

diff --git a/templates/webpages/ct/search.html b/templates/webpages/ct/search.html
index f948b5f88..d4d8d7e87 100644
--- a/templates/webpages/ct/search.html
+++ b/templates/webpages/ct/search.html
@@ -116,8 +116,8 @@
         <label for="l_id">[% 'ID' | $T8 %]</label>
        </td>
        <td>
-        <input name="l_[% db %]number" id="l_[% db %]number" type="checkbox" class="checkbox" value="Y" checked>
-        <label for="l_[% db %]number">[% IF IS_CUSTOMER %][% 'Customer Number' | $T8 %][% ELSE %][% 'Vendor Number' | $T8 %][% END %]</label>
+        <input name="l_[% db | html %]number" id="l_[% db | html %]number" type="checkbox" class="checkbox" value="Y" checked>
+        <label for="l_[% db | html %]number">[% IF IS_CUSTOMER %][% 'Customer Number' | $T8 %][% ELSE %][% 'Vendor Number' | $T8 %][% END %]</label>
        </td>
        <td>
         <input name="l_name" id="l_name" type="checkbox" class="checkbox" value="Y" checked>