[open-ils-commits] r14972 - branches/rel_1_6/Open-ILS/examples/templates (dbs)

svn at svn.open-ils.org svn at svn.open-ils.org
Thu Nov 19 11:16:31 EST 2009


Author: dbs
Date: 2009-11-19 11:16:29 -0500 (Thu, 19 Nov 2009)
New Revision: 14972

Modified:
   branches/rel_1_6/Open-ILS/examples/templates/overdue_combined_xml.example
Log:
Apply patch from Galen Charlton to escape email addresses in overdue notices:

"Trivial patch to turn on XML-escaping of e-mail addresses.  '&' is a  
rarely used but valid character in email addresses, and failing to  
escape makes the overdue notice data file non-well-formed."


Modified: branches/rel_1_6/Open-ILS/examples/templates/overdue_combined_xml.example
===================================================================
--- branches/rel_1_6/Open-ILS/examples/templates/overdue_combined_xml.example	2009-11-19 16:14:42 UTC (rev 14971)
+++ branches/rel_1_6/Open-ILS/examples/templates/overdue_combined_xml.example	2009-11-19 16:16:29 UTC (rev 14972)
@@ -23,7 +23,7 @@
             <addr_city>[% escape_xml(user_addr.city) %]</addr_city>
             <addr_state>[% user_addr.state %]</addr_state>
             <addr_post_code>[% user_addr.post_code %]</addr_post_code>
-            <email>[% user.email %]</email>
+            <email>[% escape_xml(user.email) %]</email>
             <sys_id>[% user.id %]</sys_id>
         </patron>
         <location>
@@ -35,7 +35,7 @@
             <addr_city>[% escape_xml(lib_addr.city) %]</addr_city>
             <addr_state>[% lib_addr.state %]</addr_state>
             <addr_post_code>[% lib_addr.post_code %]</addr_post_code>
-            <email>[% lib.email %]</email>
+            <email>[% escape_xml(lib.email) %]</email>
             <sys_id>[% lib.id %]</sys_id>
         </location>
         [%- FOREACH circ = circ_set.circ_list %]



More information about the open-ils-commits mailing list