projects
/
freeside.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
ab9786f
)
allow punctuation in tax name on XLS download of report, #33255
author
Mark Wells
<mark@freeside.biz>
Tue, 3 Nov 2015 21:14:24 +0000
(13:14 -0800)
committer
Mark Wells
<mark@freeside.biz>
Tue, 3 Nov 2015 21:15:08 +0000
(13:15 -0800)
httemplate/search/report_tax-xls.cgi
patch
|
blob
|
history
diff --git
a/httemplate/search/report_tax-xls.cgi
b/httemplate/search/report_tax-xls.cgi
index
07fcf7c
..
c914d5a
100755
(executable)
--- a/
httemplate/search/report_tax-xls.cgi
+++ b/
httemplate/search/report_tax-xls.cgi
@@
-24,8
+24,9
@@
if ( $cgi->param('agentnum') =~ /^(\d+)$/ ) {
$agentname = $agent->agentname;
}
-if ( $cgi->param('taxname') =~ /^([\w ]+)$/ ) {
- $params{taxname} = $1;
+# allow anything in here; FS::Report::Tax will treat it as unsafe
+if ( length($cgi->param('taxname')) ) {
+ $params{taxname} = $cgi->param('taxname');
} else {
die "taxname required";
}