2 backports

git-svn-id: svn+ssh://murphy/home/svn/platal/branches/platal-0.9.8@39 839d8a87-29fc-0310-9880-83ba4fa771e5

diff --git a/templates/emails/send.tpl b/templates/emails/send.tpl
index 810f177..998cb64 100644 (file)
--- a/templates/emails/send.tpl
+++ b/templates/emails/send.tpl
@@ -61,7 +61,7 @@
         <input type='text' name='from' size='60' value='{if $smarty.request.from}
 {$smarty.request.from}
 {else}
-"{$smarty.session.prenom} {$smarty.session.nom}" &lt;{$smarty.session.bestalias}@{#globals.mail.domain#}&gt;
+"{$smarty.session.prenom} {$smarty.session.nom|escape}" &lt;{$smarty.session.bestalias}@{#globals.mail.domain#}&gt;
 {/if}' />
       </td>
     </tr>

diff --git a/templates/newsletter/submit.tpl b/templates/newsletter/submit.tpl
index 0a8611c..192914a 100644 (file)
--- a/templates/newsletter/submit.tpl
+++ b/templates/newsletter/submit.tpl
@@ -105,7 +105,7 @@ Les contacts, prix, adresses mail utiles, liens web, ...  sont en sus, et sont 
     <tr class="impair">
       <td class='titre'>Sujet</td>
       <td>
-        <input size='60' type='text' value='{$smarty.request.title}' name='title' />
+        <input size='60' type='text' value='{$smarty.request.title|escape}' name='title' />
       </td>
     </tr>
     <tr class="pair">