From b412d2636fd4997389a5ecad459c2e31adf670fc Mon Sep 17 00:00:00 2001
From: Frédéric Buclin <LpSolit@gmail.com>
Date: Mon, 27 Aug 2012 20:14:49 +0200
Subject: Bug 785917: Custom field descriptions are not properly escaped when
 displayed as bug list column headers r=glob a=LpSolit

---
 template/en/default/filterexceptions.pl  | 1 -
 template/en/default/list/table.html.tmpl | 2 +-
 2 files changed, 1 insertion(+), 2 deletions(-)

(limited to 'template')

diff --git a/template/en/default/filterexceptions.pl b/template/en/default/filterexceptions.pl
index 8680573fb..496c60bb6 100644
--- a/template/en/default/filterexceptions.pl
+++ b/template/en/default/filterexceptions.pl
@@ -154,7 +154,6 @@
 'list/table.html.tmpl' => [
   'tableheader',
   'bug.bug_id', 
-  'abbrev.$id.title || field_descs.$id || column.title',
 ],
 
 'list/list.csv.tmpl' => [
diff --git a/template/en/default/list/table.html.tmpl b/template/en/default/list/table.html.tmpl
index 2b266d4ce..a074fcbd0 100644
--- a/template/en/default/list/table.html.tmpl
+++ b/template/en/default/list/table.html.tmpl
@@ -133,7 +133,7 @@
       [% PROCESS new_order %]
       [%-#%]&amp;query_based_on=
       [% defaultsavename OR searchname FILTER uri %]">
-        [%- abbrev.$id.title || field_descs.$id || column.title -%]
+        [%- abbrev.$id.title || field_descs.$id || column.title FILTER html -%]
         [% PROCESS order_arrow ~%]
     </a>
   </th>
-- 
cgit v1.2.3-24-g4f1b