[open-ils-commits] r14976 - branches/rel_1_4_0/Open-ILS/examples/templates (dbs)

[svn at svn.open-ils.org]

Author: dbs
Date: 2009-11-19 11:20:12 -0500 (Thu, 19 Nov 2009)
New Revision: 14976

Modified:
   branches/rel_1_4_0/Open-ILS/examples/templates/overdue_combined_xml.example
Log:
Apply patch from Galen Charlton to escape email addresses in overdue notices:

"Trivial patch to turn on XML-escaping of e-mail addresses.  '&' is a  
rarely used but valid character in email addresses, and failing to  
escape makes the overdue notice data file non-well-formed."


Modified: branches/rel_1_4_0/Open-ILS/examples/templates/overdue_combined_xml.example
===================================================================
--- branches/rel_1_4_0/Open-ILS/examples/templates/overdue_combined_xml.example	2009-11-19 16:19:51 UTC (rev 14975)
+++ branches/rel_1_4_0/Open-ILS/examples/templates/overdue_combined_xml.example	2009-11-19 16:20:12 UTC (rev 14976)
@@ -23,7 +23,7 @@
             <addr_city>[% escape_xml(user_addr.city) %]</addr_city>
             <addr_state>[% user_addr.state %]</addr_state>
             <addr_post_code>[% user_addr.post_code %]</addr_post_code>
-            <email>[% user.email %]</email>
+            <email>[% escape_xml(user.email) %]</email>
             <sys_id>[% user.id %]</sys_id>
         </patron>
         <location>
@@ -34,7 +34,7 @@
             <addr_city>[% escape_xml(lib_addr.city) %]</addr_city>
             <addr_state>[% lib_addr.state %]</addr_state>
             <addr_post_code>[% lib_addr.post_code %]</addr_post_code>
-            <email>[% lib.email %]</email>
+            <email>[% escape_xml(lib.email) %]</email>
             <sys_id>[% lib.id %]</sys_id>
         </location>
         [%- FOREACH circ = circ_set.circ_list %]