summaryrefslogtreecommitdiffstats
path: root/template/en/default/global
diff options
context:
space:
mode:
authorlpsolit%gmail.com <>2006-10-15 05:26:50 +0200
committerlpsolit%gmail.com <>2006-10-15 05:26:50 +0200
commitb1ef63e5bfc0d3995245b42154686db1400b2c22 (patch)
tree0db4955b3303c2e5565d6e97e8fac62c63147117 /template/en/default/global
parent40aae68e1263b9677285473a9205cef378b451c0 (diff)
downloadbugzilla-b1ef63e5bfc0d3995245b42154686db1400b2c22.tar.gz
bugzilla-b1ef63e5bfc0d3995245b42154686db1400b2c22.tar.xz
Bug 206037: [SECURITY] Fix escaping/quoting in edit*.cgi scripts - Patch by Frédéric Buclin <LpSolit@gmail.com> r=justdave a=justdave
Diffstat (limited to 'template/en/default/global')
-rw-r--r--template/en/default/global/choose-classification.html.tmpl2
-rw-r--r--template/en/default/global/choose-product.html.tmpl2
2 files changed, 2 insertions, 2 deletions
diff --git a/template/en/default/global/choose-classification.html.tmpl b/template/en/default/global/choose-classification.html.tmpl
index 0a14fe44e..df0c37911 100644
--- a/template/en/default/global/choose-classification.html.tmpl
+++ b/template/en/default/global/choose-classification.html.tmpl
@@ -54,7 +54,7 @@
</th>
[% IF class.description %]
- <td valign="top">&nbsp;[% class.description %]</td>
+ <td valign="top">&nbsp;[% class.description FILTER html_light %]</td>
[% END %]
</tr>
[% END %]
diff --git a/template/en/default/global/choose-product.html.tmpl b/template/en/default/global/choose-product.html.tmpl
index 346a53751..da47332c2 100644
--- a/template/en/default/global/choose-product.html.tmpl
+++ b/template/en/default/global/choose-product.html.tmpl
@@ -51,7 +51,7 @@
[% p.name FILTER html %]</a>:&nbsp;
</th>
- <td valign="top">[% p.description FILTER none %]</td>
+ <td valign="top">[% p.description FILTER html_light %]</td>
</tr>
[% END %]