From ad9a6092f6ccee77d9b4f249296aaab6a3b46f09 Mon Sep 17 00:00:00 2001
From: kevin_fourie <kevin_fourie@c91229c3-7414-0410-bfa2-8a42b809f60b>
Date: Thu, 19 Jul 2007 11:04:31 +0000
Subject: [PATCH] Merged in from DEV trunk...

---
 templates/kt3/browse.smarty                                | 2 +-
 templates/ktcore/assist/assist_notification.smarty         | 4 ++--
 templates/ktcore/assist/assist_notification_details.smarty | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/templates/kt3/browse.smarty b/templates/kt3/browse.smarty
index 7819bf9..b420c09 100644
--- a/templates/kt3/browse.smarty
+++ b/templates/kt3/browse.smarty
@@ -44,7 +44,7 @@
   <input type="hidden" name="sListCode" value="{$code}" />
   <input type="hidden" name="action" value="bulkaction" />
   <input type="hidden" name="fReturnAction" value="{$returnaction}" />
-  <input type="hidden" name="fReturnData" value="{$returndata}" />
+  <input type="hidden" name="fReturnData" value="{$returndata|sanitize}" />
 
   {foreach from=$bulkactions item=bulkaction}
       <input type="submit" name="submit[{$bulkaction->getName()}]" value="{$bulkaction->getDisplayName()}" />
diff --git a/templates/ktcore/assist/assist_notification.smarty b/templates/ktcore/assist/assist_notification.smarty
index 4fe200e..4f3057c 100644
--- a/templates/ktcore/assist/assist_notification.smarty
+++ b/templates/ktcore/assist/assist_notification.smarty
@@ -1,6 +1,6 @@
-<dt class="actionitem">{$subject}</dt>
+<dt class="actionitem">{$subject|sanitize}</dt>
 <dd class="actionmessage">
-    {i18n arg_name=$document_name arg_state=$state_name arg_user=$actor->getName()}A
+    {i18n arg_name=$document_name|sanitize arg_state=$state_name arg_user=$actor->getName()}A
     user, <b>#user#</b>, has requested help on the document <b>#name#</b>, and you are
     the owner or an admin of this document.{/i18n}
     <div class="actionoptions">
diff --git a/templates/ktcore/assist/assist_notification_details.smarty b/templates/ktcore/assist/assist_notification_details.smarty
index cd6bab8..c3bb4cf 100644
--- a/templates/ktcore/assist/assist_notification_details.smarty
+++ b/templates/ktcore/assist/assist_notification_details.smarty
@@ -1,5 +1,5 @@
 <p class="descriptiveText">
-    {i18n arg_name=$document_name arg_state=$state_name arg_user=$actor->getName()}A
+    {i18n arg_name=$document_name|sanitize arg_state=$state_name arg_user=$actor->getName()}A
     user, <b>#user#</b>, has requested help on the document <b>#name#</b>, and you are
     the owner or an admin of this document.{/i18n}
 </p>
--
libgit2 0.21.4