escape certain characters before passing to eval (\, $, and `)

[confetti] / templates / view_attendee.sh

diff --git a/templates/view_attendee.sh b/templates/view_attendee.sh
index 685ea8a4a46ac57ce44b735dbe791d6234e4103a..cd44259a1afcea3bd8fe5a24fe68d48732606a55 100755 (executable)
--- a/templates/view_attendee.sh
+++ b/templates/view_attendee.sh
@@ -1,13 +1,19 @@
 echo '<div id="'${id}'" class="card">'
 echo '  <div class="section basic">'
 echo '    <span class="item FN">'$values[FN]'</span>'
-[ -n "$value[GENDER]" ] && \
+[ -n "$values[GENDER]" ] && \
   echo '    <span class="item GENDER">'$(l10n $values[GENDER])'</span>'
 for n in NICKNAME NICKNAME{0..10}; do [ -n "$values[$n]" ] &&\
   echo '    <span class="item NICKNAME">aka. '$values[$n]'</span>'
 done
 [ -n "$values[BDAY]" ] &&\
   echo '    <span class="item BDAY"><b>*:</b> '$values[BDAY]'</span>'
+
+[ -n "$values[X-ZACK-JOINDATE]" ] &&\
+  echo '    <span class="item X-ZACK-JOINDATE"><b>'$(l10n label_join)':</b> '$values[X-ZACK-JOINDATE]'</span>'
+[ -n "$values[X-ZACK-LEAVEDATE]" ] &&\
+  echo '    <span class="item X-ZACK-LEAVEDATE"><b>'$(l10n label_leave)':</b> '$values[X-ZACK-LEAVEDATE]'</span>'
+
 if [ -n "$values[SOUND]" ]; then
   echo '    <audio controls="controls" class="item SOUND">'
   echo '      <source type="audio/ogg" src="data:audio/ogg;base64,'$values[SOUND]'" />'