Index: /branches/version-2_13_1/data/Smarty/templates/sphone/shopping/payment.tpl
===================================================================
--- /branches/version-2_13_1/data/Smarty/templates/sphone/shopping/payment.tpl	(revision 23256)
+++ /branches/version-2_13_1/data/Smarty/templates/sphone/shopping/payment.tpl	(revision 23275)
@@ -131,5 +131,5 @@
         <!--{assign var=key value="deliv_id"}-->
         <!--{if $is_single_deliv}-->
-            <input type="hidden" name="<!--{$key}-->" value="<!--{$arrForm[$key].value}-->" id="deliv_id" />
+            <input type="hidden" name="<!--{$key}-->" value="<!--{$arrForm[$key].value|h}-->" id="deliv_id" />
         <!--{else}-->
             <section class="pay_area">
Index: /branches/version-2_13_1/data/Smarty/templates/default/shopping/payment.tpl
===================================================================
--- /branches/version-2_13_1/data/Smarty/templates/default/shopping/payment.tpl	(revision 23256)
+++ /branches/version-2_13_1/data/Smarty/templates/default/shopping/payment.tpl	(revision 23275)
@@ -132,5 +132,5 @@
             <!--{assign var=key value="deliv_id"}-->
             <!--{if $is_single_deliv}-->
-                <input type="hidden" name="<!--{$key}-->" value="<!--{$arrForm[$key].value}-->" id="deliv_id" />
+                <input type="hidden" name="<!--{$key}-->" value="<!--{$arrForm[$key].value|h}-->" id="deliv_id" />
             <!--{else}-->
             <div class="pay_area">
Index: /branches/version-2_13_1/data/Smarty/templates/mobile/shopping/payment.tpl
===================================================================
--- /branches/version-2_13_1/data/Smarty/templates/mobile/shopping/payment.tpl	(revision 23236)
+++ /branches/version-2_13_1/data/Smarty/templates/mobile/shopping/payment.tpl	(revision 23275)
@@ -29,5 +29,5 @@
         <input type="hidden" name="uniqid" value="<!--{$tpl_uniqid}-->">
         <!--{assign var=key value="deliv_id"}-->
-        <input type="hidden" name="<!--{$key}-->" value="<!--{$arrForm[$key].value}-->">
+        <input type="hidden" name="<!--{$key}-->" value="<!--{$arrForm[$key].value|h}-->">
         ■お支払方法 <font color="#FF0000">*</font><br>
         <!--{assign var=key value="payment_id"}-->