From c6e39504311112c1dd4f69ca0a486262e1cdd704 Mon Sep 17 00:00:00 2001 From: Owen Leonard Date: Wed, 23 Nov 2011 09:45:47 -0500 Subject: [PATCH] [3.4.x] Bug 2847 Use HTML escape in templates where appropriate Content-Type: text/plain; charset="utf-8" Fixes for output in a couple of acquisitions templates where user-generated data should be escaped. This instances were found by creating a vendor name like "Baker & Taylor" and finding that the ampersand was not escaped, causing validation errors. This patch also consolidates multiple @@ -13,20 +13,14 @@ } }); }); -//]]> - - -