From 026539311662235ea26f5f3cfe885322846db6fb Mon Sep 17 00:00:00 2001
From: "gerv%gerv.net" <>
Date: Sun, 7 Sep 2003 02:23:09 +0000
Subject: Bug 207044 - Filter more template directives. None of these are
 security bugs, but they need fixing anyway. Patch by gerv; r,a=justdave.

---
 template/en/default/search/form.html.tmpl                | 2 +-
 template/en/default/search/knob.html.tmpl                | 2 +-
 template/en/default/search/search-report-graph.html.tmpl | 2 +-
 template/en/default/search/search-report-table.html.tmpl | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

(limited to 'template/en/default/search')

diff --git a/template/en/default/search/form.html.tmpl b/template/en/default/search/form.html.tmpl
index 6862ac6f6..db20c6aa5 100644
--- a/template/en/default/search/form.html.tmpl
+++ b/template/en/default/search/form.html.tmpl
@@ -352,7 +352,7 @@ function selectProduct(f) {
              value="[% default.short_desc.0 FILTER html %]">
     </td>
     <td>
-      <input type="submit" value="[% button_name %]">
+      <input type="submit" value="[% button_name FILTER html %]">
     </td>
   </tr>
 
diff --git a/template/en/default/search/knob.html.tmpl b/template/en/default/search/knob.html.tmpl
index 27f37fbd7..8386eff04 100644
--- a/template/en/default/search/knob.html.tmpl
+++ b/template/en/default/search/knob.html.tmpl
@@ -148,7 +148,7 @@
   [% END %]
   </select>
 
-  <input type="submit" value="[% button_name %]">
+  <input type="submit" value="[% button_name FILTER html %]">
 
   [% IF userdefaultquery %]
      <p>
diff --git a/template/en/default/search/search-report-graph.html.tmpl b/template/en/default/search/search-report-graph.html.tmpl
index 51911fb29..7793f3012 100644
--- a/template/en/default/search/search-report-graph.html.tmpl
+++ b/template/en/default/search/search-report-graph.html.tmpl
@@ -107,7 +107,7 @@
 [% PROCESS search/form.html.tmpl %]
 
 <br>
-<input type="submit" value="[% button_name %]">
+<input type="submit" value="[% button_name FILTER html %]">
 <input type="hidden" name="action" value="wrap">
 <hr>
 
diff --git a/template/en/default/search/search-report-table.html.tmpl b/template/en/default/search/search-report-table.html.tmpl
index 43010f16c..b850f93c8 100644
--- a/template/en/default/search/search-report-table.html.tmpl
+++ b/template/en/default/search/search-report-table.html.tmpl
@@ -82,7 +82,7 @@
 [% PROCESS search/form.html.tmpl %]
 
 <br>
-<input type="submit" value="[% button_name %]">
+<input type="submit" value="[% button_name FILTER html %]">
 <input type="hidden" name="format" value="table">
 <input type="hidden" name="action" value="wrap">
 <hr>
-- 
cgit v1.2.3-24-g4f1b