From 91341bcfc6d9e2f06b3abf3f73e05c2c60fbd30e Mon Sep 17 00:00:00 2001
From: "bbaetz%student.usyd.edu.au" <>
Date: Sun, 7 Apr 2002 11:13:31 +0000
Subject: Bug 133423 - Audit templates for FILTER usage r=gerv, justdave

---
 template/default/show/comments.tmpl      | 2 +-
 template/default/show/multiple.tmpl      | 8 ++++----
 template/default/show/show_bug.html.tmpl | 3 ++-
 3 files changed, 7 insertions(+), 6 deletions(-)

(limited to 'template/default/show')

diff --git a/template/default/show/comments.tmpl b/template/default/show/comments.tmpl
index 14828175d..b020caa0f 100644
--- a/template/default/show/comments.tmpl
+++ b/template/default/show/comments.tmpl
@@ -39,7 +39,7 @@
     <br>
     <i>------- Additional Comment
       <a name="c[% count %]" href="#c[% count %]">#[% count %]</a> From 
-      <a href="mailto:[% comment.email %]">[% comment.name %]</a>
+      <a href="mailto:[% comment.email FILTER html %]">[% comment.name FILTER html %]</a>
       [%+ comment.time %] -------
     </i>
   [% END %]
diff --git a/template/default/show/multiple.tmpl b/template/default/show/multiple.tmpl
index 2673c5457..8313323aa 100644
--- a/template/default/show/multiple.tmpl
+++ b/template/default/show/multiple.tmpl
@@ -96,7 +96,7 @@
       <td colspan="2">
       [% IF Param('usetargetmilestone') %]
           <b>Target Milestone:</b>&nbsp;
-          [% bug.target_milestone %]
+          [% bug.target_milestone FILTER html %]
       [% END %]
       </td>
     </tr>
@@ -109,14 +109,14 @@
     
     <tr>
       <td colspan="4">
-        <b>Summary:</b>&nbsp;[% bug.short_desc %]
+        <b>Summary:</b>&nbsp;[% bug.short_desc FILTER html %]
       </td>
     </tr>
      
     [% IF use_keywords %]
       <tr>
         <td colspan="4">
-          <b>Keywords: </b>&nbsp;[% bug.keywords %]
+          <b>Keywords: </b>&nbsp;[% bug.keywords FILTER html %]
         </td>
       </tr>
     [% END %]
@@ -151,6 +151,6 @@
 [% BLOCK cell %]
   <td>
     <b>[% attr.description%]:</b>&nbsp;
-    [% bug.${attr.name} %]
+    [% bug.${attr.name} FILTER html %]
   </td>
 [% END %]
diff --git a/template/default/show/show_bug.html.tmpl b/template/default/show/show_bug.html.tmpl
index c6f7deb2b..9b77c23a2 100644
--- a/template/default/show/show_bug.html.tmpl
+++ b/template/default/show/show_bug.html.tmpl
@@ -19,11 +19,12 @@
   # Contributor(s): Gervase Markham <gerv@gerv.net>
   #%]
 
+[% filtered_desc = bug.short_desc FILTER html %]
 [% UNLESS header_done %]
   [% INCLUDE global/header 
     title = "Bug $bug.bug_id - $bug.short_desc"
     h1 = "Bugzilla Bug $bug.bug_id"
-    h2 = bug.short_desc
+    h2 = filtered_desc
     extra = navigation_links()
    %]
 [% END %]
-- 
cgit v1.2.3-24-g4f1b