X-Git-Url: http://wagnertech.de/gitweb/gitweb.cgi/mfinanz.git/blobdiff_plain/288111da982510d86d73db5cef54c52e07a84f5a..a3ae31c:/templates/webpages/admin/edit_user.html

diff --git a/templates/webpages/admin/edit_user.html b/templates/webpages/admin/edit_user.html
index 1fb9eff6d..f8154bf07 100644
--- a/templates/webpages/admin/edit_user.html
+++ b/templates/webpages/admin/edit_user.html
@@ -3,7 +3,7 @@
 
 [%- INCLUDE 'common/flash.html' %]
 
-<h1>[% title %]</h1>
+<h1>[% HTML.escape(title) %]</h1>
 
 <p>[% L.link(SELF.url_for(action="show"), LxERP.t8("Back")) %]</p>
 
@@ -109,7 +109,7 @@
  </p>
 
  <div class="clearfix">
-  [% L.select_tag("user.clients[]", SELF.all_clients, id="user_clients", title_key="name", default=SELF.user.clients, default_key='id', multiple=1) %]
+  [% L.select_tag("user.clients[]", SELF.all_clients, id="user_clients", title_key="name", default=SELF.user.clients, default_value_key='id', multiple=1) %]
   [% L.multiselect2side("user_clients", labelsx => LxERP.t8("All clients"), labeldx => LxERP.t8("Clients this user has access to")) %]
  </div>
 
@@ -127,7 +127,7 @@
  </p>
 
  <div class="clearfix">
-  [% L.select_tag("user.groups[]", SELF.all_groups, id="user_groups", title_key="name", default=SELF.user.groups, default_key='id', multiple=1) %]
+  [% L.select_tag("user.groups[]", SELF.all_groups, id="user_groups", title_key="name", default=SELF.user.groups, default_value_key='id', multiple=1) %]
   [% L.multiselect2side("user_groups", labelsx => LxERP.t8("All groups"), labeldx => LxERP.t8("Groups this user is a member in")) %]
  </div>