Merge pull request #1475 from kareila/1453-search_escape

[#1453] FormHTML functions automatically ehtml their arguments
dreamwidth · Jul 1, 2015 · 2b510d2 · 2b510d2
2 parents 5b4ff4f + 63f0182
commit 2b510d2
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/views/search.tt b/views/search.tt
@@ -44,8 +44,7 @@
     %]
 
     <br>
-    [% eq = q | html;
-       form.textbox( name = "query", maxlength = "255", size = "60", value = eq );
+    [% form.textbox( name = "query", maxlength = "255", size = "60", value = q );
        " ";
        form.submit( value = dw.ml( '.button.search' ) );
     %]
@@ -135,7 +134,7 @@
                 IF result.total > offsetm -%]
                     <form method="POST" action='[% site.root %]/search?offset=[% offsetm %]'>
                     [% dw.form_auth %]
-                    [% form.hidden( name = 'query', value = eq );
+                    [% form.hidden( name = 'query', value = q );
                        form.hidden( name = 'mode', value = su ? su.user : '' );
                        form.hidden( name = 'sort_by', value = sort_by );
                        form.hidden( name = 'with_comments', value = wc );