Bug 7618 Escape HTML special characters for SQL displayed above results in Report module

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
Signed-off-by: Paul Poulain <paul.poulain@biblibre.com>
This commit is contained in:
David 2012-03-13 10:17:32 +11:00 committed by Paul Poulain
parent ba6c8485ca
commit b49af1df17
1 changed files with 1 additions and 1 deletions

View File

@ -496,7 +496,7 @@ canned reports and writing custom SQL reports.</p>
<h1>[% name %]</h1>
[% IF ( notes ) %]<p>[% notes %]</p>[% END %]
[% IF ( unlimited_total ) %]<p>Total number of rows matching the (unlimited) query is [% unlimited_total %].</p>[% END %]
<pre id="sql_output">[% sql %]</pre>
<pre id="sql_output">[% sql |html %]</pre>
<div class="pages">[% pagination_bar %]</div>
[% UNLESS ( errors ) %]
<table>