Bug 8973 [3.6.x] HTML and URL escape missing in OPAC templates

Adding HTML filter to some template variables which require them.
This patch is for 3.6.x, based on Fridolyn SOMERS patch for master.

Signed-off-by: Liz Rea - Catalyst <liz@catalyst.net.nz>
This commit is contained in:
Owen Leonard 2012-11-19 08:46:46 -05:00 committed by Liz Rea - Catalyst
parent 1c9fa798db
commit b28598369a
2 changed files with 3 additions and 3 deletions

View File

@ -1,4 +1,4 @@
[% INCLUDE 'doc-head-open.inc' %][% LibraryNameTitle or "Koha online" %] catalog &rsaquo; Comments on [% title %]
[% INCLUDE 'doc-head-open.inc' %][% LibraryNameTitle or "Koha online" %] catalog &rsaquo; Comments on [% title |html %]
[% INCLUDE 'doc-head-close.inc' %]
<style type="text/css">
#custom-doc { width:37.08em;*width:36.16em;min-width:485px; margin:1em auto; text-align:left; }
@ -68,7 +68,7 @@
<form id="reviewf" action="/cgi-bin/koha/opac-review.pl[% IF ( cgi_debug ) %]?debug=1[% END %]" method="post">
<input type="hidden" name="biblionumber" value="[% biblionumber | html%]" />
<fieldset class="brief">
<legend>Comments on <i>[% title |html %] [% subtitle %]</i>[% IF ( author ) %]by [% author %][% END %]</legend>
<legend>Comments on <i>[% title |html %] [% subtitle |html %]</i>[% IF ( author ) %]by [% author |html %][% END %]</legend>
<ol><li><textarea id="review" name="review" cols="60" rows="8">[% review %]</textarea></li></ol>
</fieldset>
<p>Note: Your comment must be approved by a librarian. </p>

View File

@ -129,7 +129,7 @@ $.tablesorter.addParser({
Search for:
</th>
<td>
<input type="text" name="title" value="[% title %]" />
<input type="text" name="title" value="[% title |html %]" />
</td>
<th>
Suggested by: