diff --git a/htdocs/compta/bank/line.php b/htdocs/compta/bank/line.php index 76f7f821f8a..c84f52ffee1 100644 --- a/htdocs/compta/bank/line.php +++ b/htdocs/compta/bank/line.php @@ -452,7 +452,7 @@ if ($result) { } print ''; } else { - print ''.$objp->fk_type.' '.$objp->num_chq.''; + print ''.$objp->fk_type.' '.dol_escape_htmltag($objp->num_chq).''; } print ""; @@ -462,7 +462,7 @@ if ($result) { print ""; if ($user->rights->banque->modifier || $user->rights->banque->consolidate) { print ''; - print ''; + print ''; print ''; } else { print ''.$objp->emetteur.''; @@ -475,10 +475,10 @@ if ($result) { print ""; if ($user->rights->banque->modifier || $user->rights->banque->consolidate) { print ''; - print ''; + print ''; print ''; } else { - print ''.$objp->banque.''; + print ''.dol_escape_htmltag($objp->banque).''; } print ""; @@ -523,6 +523,7 @@ if ($result) { print ""; // Description + $reg = array(); print "".$langs->trans("Label").""; if ($user->rights->banque->modifier || $user->rights->banque->consolidate) { print ''; @@ -531,7 +532,7 @@ if ($result) { // Label generique car entre parentheses. On l'affiche en le traduisant print $langs->trans($reg[1]); } else { - print $objp->label; + print dol_escape_htmltag($objp->label); } print '">'; print ''; @@ -541,7 +542,7 @@ if ($result) { // Label generique car entre parentheses. On l'affiche en le traduisant print $langs->trans($reg[1]); } else { - print $objp->label; + print dol_escape_htmltag($objp->label); } print ''; }