eventum-xss.patch

   1 --- eventum-20060720/templates/header.tpl.html  2006-07-24 16:01:01.715185682 +0300
   2 +++ /home/glen/header.tpl.html  2006-07-24 15:59:28.000000000 +0300
   3 @@ -1,6 +1,6 @@
   4  <html>
   5  <head>
   6 -<title>{if $extra_title != ""}{$extra_title} - {/if}{$app_setup.tool_caption|default:$application_title}</title>
   7 +<title>{if $extra_title != ""}{$extra_title|escape:"html"} - {/if}{$app_setup.tool_caption|default:$application_title|escape:"html"}</title>
   8  <link rel="stylesheet" href="{$rel_url}css/dynCalendar.css" type="text/css" media="screen">
   9  <link rel="icon" href="favicon.ico" />
  10  {if $user_agent == 'ie'}