From 1fa7201e9e4eada715381c6b1a6bc8ee2955f5bf Mon Sep 17 00:00:00 2001
From: Greg Roach <fisharebest@gmail.com>
Date: Wed, 1 Jan 2014 21:47:58 +0000
Subject: Unescaped name in census assistant

---
 modules_v3/GEDFact_assistant/_CENS/census_2_source_input.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules_v3/GEDFact_assistant/_CENS/census_2_source_input.php b/modules_v3/GEDFact_assistant/_CENS/census_2_source_input.php
index c1c865544e..c469db32b1 100644
--- a/modules_v3/GEDFact_assistant/_CENS/census_2_source_input.php
+++ b/modules_v3/GEDFact_assistant/_CENS/census_2_source_input.php
@@ -562,7 +562,7 @@ if (!defined('WT_WEBTREES')) {
 		}
 		var cens_ctry_a = document.getElementById('censCtry');
 		var cens_ctry = cens_ctry_a.value;
-		document.getElementById('Titl').value = '<?php echo WT_I18N::translate('Census transcript'),' - ',$wholename, ' - ', WT_I18N::translate('Household'); ?>';
+		document.getElementById('Titl').value = '<?php echo WT_I18N::translate('Census transcript'),' - ', WT_Filter::escapeJs($wholename), ' - ', WT_I18N::translate('Household'); ?>';
 		var prev = document.getElementById('prevYear');
 		prev.value = cenyear;
 	}
@@ -1110,7 +1110,7 @@ if (!defined('WT_WEBTREES')) {
 		<div class="cens_sour_1">
 			<div class="cens_sour_2"><?php echo WT_I18N::translate('Title'); ?></div>
 			<script>
-				document.writeln('<input id="Titl" name="Titl" type="text" value="<?php echo WT_I18N::translate('Census transcript'),' - ',$wholename, ' - ', WT_I18N::translate('Household'); ?>">');
+				document.writeln('<input id="Titl" name="Titl" type="text" value="<?php echo WT_I18N::translate('Census transcript'),' - ', WT_Filter::escapeJs($wholename), ' - ', WT_I18N::translate('Household'); ?>">');
 			</script>
 		</div>
 		<div class="cens_sour_1">
-- 
cgit v1.3