[open-ils-commits] r14971 - trunk/Open-ILS/examples/templates (dbs)

[svn at svn.open-ils.org]

Author: dbs
Date: 2009-11-19 11:14:42 -0500 (Thu, 19 Nov 2009)
New Revision: 14971

Modified:
   trunk/Open-ILS/examples/templates/overdue_combined_xml.example
Log:
Apply patch from Galen Charlton to escape email addresses in overdue notices:

"Trivial patch to turn on XML-escaping of e-mail addresses.  '&' is a  
rarely used but valid character in email addresses, and failing to  
escape makes the overdue notice data file non-well-formed."


Modified: trunk/Open-ILS/examples/templates/overdue_combined_xml.example
===================================================================
--- trunk/Open-ILS/examples/templates/overdue_combined_xml.example	2009-11-19 15:12:58 UTC (rev 14970)
+++ trunk/Open-ILS/examples/templates/overdue_combined_xml.example	2009-11-19 16:14:42 UTC (rev 14971)
@@ -23,7 +23,7 @@
             <addr_city>[% escape_xml(user_addr.city) %]</addr_city>
             <addr_state>[% user_addr.state %]</addr_state>
             <addr_post_code>[% user_addr.post_code %]</addr_post_code>
-            <email>[% user.email %]</email>
+            <email>[% escape_xml(user.email) %]</email>
             <sys_id>[% user.id %]</sys_id>
         </patron>
         <location>
@@ -35,7 +35,7 @@
             <addr_city>[% escape_xml(lib_addr.city) %]</addr_city>
             <addr_state>[% lib_addr.state %]</addr_state>
             <addr_post_code>[% lib_addr.post_code %]</addr_post_code>
-            <email>[% lib.email %]</email>
+            <email>[% escape_xml(lib.email) %]</email>
             <sys_id>[% lib.id %]</sys_id>
         </location>
         [%- FOREACH circ = circ_set.circ_list %]