xml escaping fix
This commit is contained in:
parent
a734d2b369
commit
bb7820df9e
1 changed files with 7 additions and 1 deletions
|
|
@ -499,9 +499,15 @@ my %transactionData = %{$self->{_transactionParams}};
|
|||
|
||||
$items = WebGUI::Commerce::Transaction->new($self->session, $transactionData{ORGID})->getItems;
|
||||
foreach (@{$items}) {
|
||||
my $data = $_->{itemName};
|
||||
$data =~ s/&/&/sg;
|
||||
$data =~ s/</</sg;
|
||||
$data =~ s/>/>/sg;
|
||||
$data =~ s/"/"/sg;
|
||||
|
||||
$xml .=
|
||||
" <Item>
|
||||
<Description>".$self->session->url->escape($_->{itemName})."</Description>
|
||||
<Description>".$data."</Description>
|
||||
<Cost>".sprintf('%.2f', $_->{amount})."</Cost>
|
||||
<Qty>".$_->{quantity}."</Qty>
|
||||
</Item>\n";
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue