From: Frédéric Buclin <LpSolit@gmail.com>
Date: Mon, 27 Aug 2012 18:22:15 +0000 (+0200)
Subject: Bug 785917: Custom field descriptions are not properly escaped when displayed as... 
X-Git-Tag: bugzilla-3.6.11~3
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2527c758f0a9fc125a1abff065b954cc65f053c0;p=thirdparty%2Fbugzilla.git

Bug 785917: Custom field descriptions are not properly escaped when displayed as bug list column headers
r=glob a=LpSolit
---

diff --git a/template/en/default/filterexceptions.pl b/template/en/default/filterexceptions.pl
index cc4d09d3e5..2ed929493b 100644
--- a/template/en/default/filterexceptions.pl
+++ b/template/en/default/filterexceptions.pl
@@ -169,7 +169,6 @@
 'list/table.html.tmpl' => [
   'tableheader',
   'bug.bug_id', 
-  'abbrev.$id.title || field_descs.$id || column.title',
 ],
 
 'list/list.csv.tmpl' => [
diff --git a/template/en/default/list/table.html.tmpl b/template/en/default/list/table.html.tmpl
index b3fa7a47c0..0bfc912efa 100644
--- a/template/en/default/list/table.html.tmpl
+++ b/template/en/default/list/table.html.tmpl
@@ -131,7 +131,7 @@
       [% PROCESS new_order %]
       [%-#%]&amp;query_based_on=
       [% defaultsavename OR searchname FILTER url_quote %]">
-        [%- abbrev.$id.title || field_descs.$id || column.title -%]
+        [%- abbrev.$id.title || field_descs.$id || column.title FILTER html -%]
         [% PROCESS order_arrow ~%]
     </a>
   </th>