From: x2002marichez <x2002marichez@839d8a87-29fc-0310-9880-83ba4fa771e5>
Date: Sat, 24 Sep 2005 11:14:28 +0000 (+0000)
Subject: 2 backports
X-Git-Tag: xorg/0.9.8~18
X-Git-Url: http://git.polytechnique.org/?a=commitdiff_plain;h=8a8b69d2f85df9b8cb594c98adb6d32bdbeb5c66;p=platal.git

2 backports


git-svn-id: svn+ssh://murphy/home/svn/platal/branches/platal-0.9.8@39 839d8a87-29fc-0310-9880-83ba4fa771e5
---

diff --git a/templates/emails/send.tpl b/templates/emails/send.tpl
index 810f177..998cb64 100644
--- a/templates/emails/send.tpl
+++ b/templates/emails/send.tpl
@@ -61,7 +61,7 @@
         <input type='text' name='from' size='60' value='{if $smarty.request.from}
 {$smarty.request.from}
 {else}
-"{$smarty.session.prenom} {$smarty.session.nom}" &lt;{$smarty.session.bestalias}@{#globals.mail.domain#}&gt;
+"{$smarty.session.prenom} {$smarty.session.nom|escape}" &lt;{$smarty.session.bestalias}@{#globals.mail.domain#}&gt;
 {/if}' />
       </td>
     </tr>
diff --git a/templates/newsletter/submit.tpl b/templates/newsletter/submit.tpl
index 0a8611c..192914a 100644
--- a/templates/newsletter/submit.tpl
+++ b/templates/newsletter/submit.tpl
@@ -105,7 +105,7 @@ Les contacts, prix, adresses mail utiles, liens web, ...  sont en sus, et sont 
     <tr class="impair">
       <td class='titre'>Sujet</td>
       <td>
-        <input size='60' type='text' value='{$smarty.request.title}' name='title' />
+        <input size='60' type='text' value='{$smarty.request.title|escape}' name='title' />
       </td>
     </tr>
     <tr class="pair">