use base qw(FS::Record);
use strict;
-use CGI qw(escapeHTML);
+use HTML::Entities;
use FS::Schema qw( dbdef );
=head1 NAME
if ($ui_type eq 'HTML') {
if ($mode eq 'view') {
- $text = q!<TR><!.$header_col_type.q! ALIGN="right">! . $label .
- q!</!.$header_col_type.q!><TD BGCOLOR="#ffffff">! . $value .
+ $text = q!<TR><!.$header_col_type.q! ALIGN="right">! . encode_entities($label) .
+ q!</!.$header_col_type.q!><TD BGCOLOR="#ffffff">! . encode_entities($value) .
q!</TD></TR>! . "\n";
} elsif ($mode eq 'edit') {
- $text = q!<TR><!.$header_col_type.q! ALIGN="right">! . $label .
+ $text = q!<TR><!.$header_col_type.q! ALIGN="right">! . encode_entities($label) .
q!</!.$header_col_type.q!><TD>!;
$text .= q!<INPUT TYPE=text NAME="! . $self->name .
- q!" VALUE="! . escapeHTML($value) . q!"!;
+ q!" VALUE="! . encode_entities($value) . q!"!;
if ($self->length) {
$text .= q! SIZE="! . $self->length . q!"!;
}
%>
<%init>
-use CGI qw(escapeHTML);
-
die "access denied"
unless $FS::CurrentUser::CurrentUser->access_right('Broadband configuration')
|| $FS::CurrentUser::CurrentUser->access_right('Broadband global configuration');
);
foreach (FS::router->virtual_fields_hash) {
- push @header_fields, escapeHTML($_->{'label'});
- push @fields, escapeHTML($_->{'name'});
+ push @header_fields, encode_entities($_->{'label'});
+ push @fields, encode_entities($_->{'name'});
push @links, '';
}
<TD ROWSPAN=2 CLASS="grid">
<INPUT NAME="<% $svcdb %>__<% $field %>_label"
STYLE="text-align: right"
- VALUE="<% $part_svc_column->columnlabel || escapeHTML($def->{'label'}) |h %>">
+ VALUE="<% $part_svc_column->columnlabel || $def->{'label'} |h %>">
</TD>
<TD ROWSPAN=1 CLASS="grid">