From d552d018b28a364d7ec43a5f383582bd99b71075 Mon Sep 17 00:00:00 2001
From: Kirill Solomko <ksolomko@sipwise.com>
Date: Thu, 26 Aug 2021 09:59:39 +0200
Subject: [PATCH] TT#114401 fix call forwards html escaping

* fix call forward html escaping for span pull-right blocks

Change-Id: I71ff64b659cfe522a030106c2898a3ab2f97d619
(cherry picked from commit e446ef986a49a13a6c1acaa7bff3f282733f94b6)
---
 share/templates/subscriber/preferences.tt | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/share/templates/subscriber/preferences.tt b/share/templates/subscriber/preferences.tt
index fa30191e9a..ab7ddc8f9a 100644
--- a/share/templates/subscriber/preferences.tt
+++ b/share/templates/subscriber/preferences.tt
@@ -206,14 +206,13 @@ $( document ).ready(function() {
                             </td>
                             <td> <!--- New Destinations (C-Number) -->
                                 [% BLOCK print_destination;
-                                    c.loc('[_1] for [_2]s',d.as_string _' <span class="pull-right">', d.timeout) _ '</span>';
+                                    escaped_dest = d.as_string | html;
+                                    c.loc('[_1] for [_2]s', escaped_dest _' <span class="pull-right">', d.timeout) _ '</span>';
                                 END; -%]
                                 [% idx = 0 -%]
                                 [% FOR maps IN cf_destinations.${cf.type} -%]
                                     [% IF maps.dset_name.search('^quickset_') && maps.destinations.size == 1 %]
-                                        [% FILTER html -%]
                                         [% PROCESS print_destination d=maps.destinations.0; -%]
-                                        [% END -%]
                                     [% ELSE %]
                                         [% jdx = 0 -%]
                                         [% escaped_dset_name = maps.dset_name | html -%]
@@ -985,7 +984,8 @@ $( document ).ready(function() {
                 <td>[% set.name | html %]</td>
                 <td>
                     [% FOREACH d IN set.destinations -%]
-                        [% c.loc('[_1]<span class="pull-right">for [_2]s</span>', d.as_string, d.timeout) %]<br/>
+                        [% escaped_cf = d.as_string | html -%]
+                        [% c.loc('[_1]<span class="pull-right">for [_2]s</span>', escaped_cf, d.timeout) %]<br/>
                     [% END -%]
                 </td>
                 <td class="ngcp-actions-column">