xml escaping fix

This commit is contained in:
Matthew Wilson 2006-05-09 17:58:32 +00:00
parent a734d2b369
commit bb7820df9e

View file

@ -499,9 +499,15 @@ my %transactionData = %{$self->{_transactionParams}};
$items = WebGUI::Commerce::Transaction->new($self->session, $transactionData{ORGID})->getItems;
foreach (@{$items}) {
my $data = $_->{itemName};
$data =~ s/&/&/sg;
$data =~ s/</&lt;/sg;
$data =~ s/>/&gt;/sg;
$data =~ s/"/&quot;/sg;
$xml .=
" <Item>
<Description>".$self->session->url->escape($_->{itemName})."</Description>
<Description>".$data."</Description>
<Cost>".sprintf('%.2f', $_->{amount})."</Cost>
<Qty>".$_->{quantity}."</Qty>
</Item>\n";