From: Sven Schöling <s.schoeling@linet-services.de>
Date: Mon, 17 Oct 2011 09:31:38 +0000 (+0200)
Subject: hidden var korrekt escapen.
X-Git-Tag: release-2.7.0beta1~215^2~9
X-Git-Url: http://wagnertech.de/gitweb/gitweb.cgi/mfinanz.git/commitdiff_plain/257791b3eef5373afd245231de577642ba477525?ds=inline;hp=-c

hidden var korrekt escapen.
---

257791b3eef5373afd245231de577642ba477525
diff --git a/templates/webpages/oe/form_footer.html b/templates/webpages/oe/form_footer.html
index ef6bc85ab..e22ee111a 100644
--- a/templates/webpages/oe/form_footer.html
+++ b/templates/webpages/oe/form_footer.html
@@ -176,7 +176,7 @@
 <input type="hidden" name="action" value="dispatcher">
 <input type="hidden" name="saved_xyznumber" value="[% HTML.escape(saved_xyznumber) %]">
 <input type="hidden" name="rowcount" value="[% HTML.escape(rowcount) %]">
-<input type="hidden" name="callback" value="[% callback %]">
+<input type="hidden" name="callback" value="[% callback | html %]">
 [% IF vc == 'customer' %]
   <input type="hidden" name="customer_discount" value="[% HTML.escape(customer_discount) %]">
 [% ELSE %]