From 5efc077d8d4e1b539580b4a420e8fd3edef8bcee Mon Sep 17 00:00:00 2001
From: vSchoener <vincent.schoener@prestashop.com>
Date: Mon, 19 Dec 2011 17:47:24 +0000
Subject: [PATCH] // Fix xss

git-svn-id: http://dev.prestashop.com/svn/v1/branches/1.5.x@11387 b9a71923-0436-4b27-9f14-aed3839534dd
---
 admin-dev/themes/template/accounting_management/content.tpl | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/admin-dev/themes/template/accounting_management/content.tpl b/admin-dev/themes/template/accounting_management/content.tpl
index 1e1e62fa5..f427b5af1 100644
--- a/admin-dev/themes/template/accounting_management/content.tpl
+++ b/admin-dev/themes/template/accounting_management/content.tpl
@@ -50,7 +50,8 @@
 			{foreach from=$shop_details['zones'] key=id_zone item=currentZone}
 				<label>{$currentZone['name']}</label>
 				<div class="margin-form">
-					<input type="text" name="zone_{$id_zone}" value="{$currentZone['account_number']}" />
+					<input type="text" name="zone_{$id_zone}" value="{$currentZone['account_number']|escape:htmlall}" />
+
 				</div>
 			{/foreach}
 			<div class="margin-form">
@@ -59,4 +60,4 @@
 		</form>
 		<div class="separation"></div>
 	</fieldset>
-{/if}
\ No newline at end of file
+{/if}