From 54728becfdad9b6e686bbe336007cba2ce518248 Mon Sep 17 00:00:00 2001
From: Mariusz Krzaczkowski <m.krzaczkowski@yetiforce.com>
Date: Fri, 26 Aug 2022 08:50:48 +0200
Subject: [PATCH] Improved display of data in the business hours

---
 .../basic/modules/Settings/BusinessHours/EditViewBlocks.tpl  | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/layouts/basic/modules/Settings/BusinessHours/EditViewBlocks.tpl b/layouts/basic/modules/Settings/BusinessHours/EditViewBlocks.tpl
index 249ef4aac7e2..aea40d1a2b57 100644
--- a/layouts/basic/modules/Settings/BusinessHours/EditViewBlocks.tpl
+++ b/layouts/basic/modules/Settings/BusinessHours/EditViewBlocks.tpl
@@ -19,7 +19,7 @@
 				<div class="card">
 					<div class="card-header">
 						{if !empty($RECORD_MODEL->getId())}
-							<span class="yfi yfi-full-editing-view mr-2"></span>{\App\Language::translate('LBL_EDIT_BUSINESS_HOURS',$QUALIFIED_MODULE)} - {$RECORD_MODEL->getName()}
+							<span class="yfi yfi-full-editing-view mr-2"></span>{\App\Language::translate('LBL_EDIT_BUSINESS_HOURS',$QUALIFIED_MODULE)} - {\App\Purifier::encodeHtml($RECORD_MODEL->getName())}
 						{else}
 							<span class="fas fa-plus mr-2"></span>{\App\Language::translate('LBL_ADD_BUSINESS_HOURS',$QUALIFIED_MODULE)}
 						{/if}
@@ -29,8 +29,7 @@
 							<div class="col-12 form-group row">
 								<label class="col-5"><span class="redColor">*</span>{\App\Language::translate('LBL_NAME', $QUALIFIED_MODULE)}</label>
 								<div class="col-7">
-									<input type="text" name="name" class="form-control w-100" {if isset($RECORD_MODEL)} value="{$RECORD_MODEL->getName()}" {/if}
-										data-validation-engine="validate[required,funcCall[Vtiger_Base_Validator_Js.invokeValidation]]">
+									<input type="text" name="name" class="form-control w-100" {if isset($RECORD_MODEL)}value="{\App\Purifier::encodeHtml($RECORD_MODEL->getName())}" {/if} data-validation-engine="validate[required,funcCall[Vtiger_Base_Validator_Js.invokeValidation]]">
 								</div>
 							</div>
 							<div class="col-12 form-group row">