From a734d2b36918fb729fa877e857e8c2ca3ee7e08e Mon Sep 17 00:00:00 2001
From: Matthew Wilson <matt@plainblack.com>
Date: Tue, 9 May 2006 17:06:53 +0000
Subject: [PATCH] escape the string.  grrrrrrrrrrrr

---
 lib/WebGUI/Commerce/Payment/ITransact.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/WebGUI/Commerce/Payment/ITransact.pm b/lib/WebGUI/Commerce/Payment/ITransact.pm
index 7c4e79096..2b96a3022 100644
--- a/lib/WebGUI/Commerce/Payment/ITransact.pm
+++ b/lib/WebGUI/Commerce/Payment/ITransact.pm
@@ -501,7 +501,7 @@ my	%transactionData = %{$self->{_transactionParams}};
 	foreach (@{$items}) {
 		$xml .= 
 "   <Item>
-        <Description>".$_->{itemName}."</Description>
+        <Description>".$self->session->url->escape($_->{itemName})."</Description>
 	<Cost>".sprintf('%.2f', $_->{amount})."</Cost>
 	<Qty>".$_->{quantity}."</Qty>
       </Item>\n";