From 91341bcfc6d9e2f06b3abf3f73e05c2c60fbd30e Mon Sep 17 00:00:00 2001
From: "bbaetz%student.usyd.edu.au" <>
Date: Sun, 7 Apr 2002 11:13:31 +0000
Subject: Bug 133423 - Audit templates for FILTER usage r=gerv, justdave

---
 template/default/admin/account_created.tmpl      | 2 +-
 template/default/admin/account_exists.tmpl       | 4 ++--
 template/default/admin/change-password.html.tmpl | 2 +-
 template/default/admin/create_account.tmpl       | 2 +-
 4 files changed, 5 insertions(+), 5 deletions(-)

(limited to 'template/default/admin')

diff --git a/template/default/admin/account_created.tmpl b/template/default/admin/account_created.tmpl
index ad4310ec4..46bc82ad2 100644
--- a/template/default/admin/account_created.tmpl
+++ b/template/default/admin/account_created.tmpl
@@ -25,7 +25,7 @@
 
 <p>
   A new account,  
-  <tt>[% login %]</tt>,
+  <tt>[% login FILTER html %]</tt>,
   has been created and a randomly-generated password has been e-mailed 
   to that address.
 </p>
diff --git a/template/default/admin/account_exists.tmpl b/template/default/admin/account_exists.tmpl
index 23b9e0338..a4357a5a0 100644
--- a/template/default/admin/account_exists.tmpl
+++ b/template/default/admin/account_exists.tmpl
@@ -25,8 +25,8 @@
 
 <form method="get" action="token.cgi">
   <input type="hidden" name="a" value="reqpw" />
-  <input type="hidden" name="loginname" value="[% login %]" />
-  A Bugzilla account for <tt>[% login %]</tt> already exists. If you
+  <input type="hidden" name="loginname" value="[% login FILTER html %]" />
+  A Bugzilla account for <tt>[% login FILTER html %]</tt> already exists. If you
   are the account holder and have forgotten your password, 
   <input type="submit" value="submit a request to change it" />.
 </form>
diff --git a/template/default/admin/change-password.html.tmpl b/template/default/admin/change-password.html.tmpl
index 29d03c030..a8ad930ee 100644
--- a/template/default/admin/change-password.html.tmpl
+++ b/template/default/admin/change-password.html.tmpl
@@ -26,7 +26,7 @@
 </p>
 
 <form method="post" action="token.cgi">
-  <input type="hidden" name="t" value="[% token %]" />
+  <input type="hidden" name="t" value="[% token FILTER html %]" />
   <input type="hidden" name="a" value="chgpw" />
   <table>
     <tr>
diff --git a/template/default/admin/create_account.tmpl b/template/default/admin/create_account.tmpl
index 61ad95b8a..ab35ce53d 100644
--- a/template/default/admin/create_account.tmpl
+++ b/template/default/admin/create_account.tmpl
@@ -38,7 +38,7 @@
       </td>
       <td>
         <input size="35" name="login" />
-        [% Param('emailsuffix') %]
+        [% Param('emailsuffix') FILTER html %]
       </td>
     </tr>
     
-- 
cgit v1.2.3-24-g4f1b