Bug 785917: Custom field descriptions are not properly escaped when displayed as...

r=glob a=LpSolit

diff --git a/template/en/default/filterexceptions.pl b/template/en/default/filterexceptions.pl
index 3cd97073996cca7d415dd4e9bbf8c043e2276dfd..505ddae2381cbd6f89c2a7ffa70a3546aef9c194 100644 (file)
--- a/template/en/default/filterexceptions.pl
+++ b/template/en/default/filterexceptions.pl
@@ -138,7 +138,6 @@
 'list/table.html.tmpl' => [
   'tableheader',
   'bug.bug_id', 
-  'abbrev.$id.title || field_descs.$id || column.title',
 ],
 
 'list/list.csv.tmpl' => [

diff --git a/template/en/default/list/table.html.tmpl b/template/en/default/list/table.html.tmpl
index 2e73d14cde33da2c140e31dd980f12e8a46f0bd6..96f4ea342c32db2adfb612bcaa2bf8af0ac539c8 100644 (file)
--- a/template/en/default/list/table.html.tmpl
+++ b/template/en/default/list/table.html.tmpl
@@ -119,7 +119,7 @@
       [% PROCESS new_order %]
       [%-#%]&query_based_on=
       [% defaultsavename OR searchname FILTER uri %]">
-        [%- abbrev.$id.title || field_descs.$id || column.title -%]
+        [%- abbrev.$id.title || field_descs.$id || column.title FILTER html -%]
         [% PROCESS order_arrow ~%]
     </a>
   </th>