From eb66071eb09eaabbf8aab6a062d4bd5c244b4a2d Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Tue, 7 Mar 2023 17:40:20 +0100 Subject: [PATCH] Bug 33066: Restore HTML escaping MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit And we add a render function that will escape by default Signed-off-by: Pedro Amorim Signed-off-by: Agustín Moyano --- .../prog/js/vue/components/ERM/AgreementsList.vue | 6 ++++-- .../prog/js/vue/components/ERM/LicensesList.vue | 6 ++++-- .../prog/js/vue/components/KohaTable.vue | 11 +++++++++++ 3 files changed, 19 insertions(+), 4 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/AgreementsList.vue b/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/AgreementsList.vue index 0606a1db49b..76efa88a440 100644 --- a/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/AgreementsList.vue +++ b/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/AgreementsList.vue @@ -224,7 +224,7 @@ export default { '' + - row.name + + escape_str(row.name) + "" ) }, @@ -235,7 +235,9 @@ export default { searchable: true, orderable: true, render: function (data, type, row, meta) { - return row.vendor_id != undefined ? row.vendor.name : "" + return row.vendor_id != undefined + ? escape_str(row.vendor.name) + : "" }, }, { diff --git a/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/LicensesList.vue b/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/LicensesList.vue index 70ba46b3c0c..86c3a311fdd 100644 --- a/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/LicensesList.vue +++ b/koha-tmpl/intranet-tmpl/prog/js/vue/components/ERM/LicensesList.vue @@ -140,7 +140,7 @@ export default { '' + - row.name + + escape_str(row.name) + "" ) }, @@ -151,7 +151,9 @@ export default { searchable: true, orderable: true, render: function (data, type, row, meta) { - return row.vendor_id != undefined ? row.vendor.name : "" + return row.vendor_id != undefined + ? escape_str(row.vendor.name) + : "" }, }, diff --git a/koha-tmpl/intranet-tmpl/prog/js/vue/components/KohaTable.vue b/koha-tmpl/intranet-tmpl/prog/js/vue/components/KohaTable.vue index 6965576a990..3e5d809ed06 100644 --- a/koha-tmpl/intranet-tmpl/prog/js/vue/components/KohaTable.vue +++ b/koha-tmpl/intranet-tmpl/prog/js/vue/components/KohaTable.vue @@ -50,6 +50,17 @@ export default { }, buttons, search: { search: this.$route.query.q }, + columnDefs: [ + { + targets: "_all", + render: function (data, type, row, meta) { + if (type == "display") { + return escape_str(data) + } + return data + }, + }, + ], ...this.options, }, hidden_ids, -- 2.25.1