View | Details | Raw Unified | Return to bug 33103
Collapse All | Expand All

(-)a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/supplier.tt (-3 / +17 lines)
Lines 466-471 Link Here
466
            aliases.splice(i, 1);
466
            aliases.splice(i, 1);
467
            refresh_aliases();
467
            refresh_aliases();
468
        }
468
        }
469
470
        function encodeHTMLEntities(str){
471
            return str.replace(/[&<>'"]/g,
472
              tag => ({
473
                  '&': '&amp;',
474
                  '<': '&lt;',
475
                  '>': '&gt;',
476
                  "'": '&#39;',
477
                  '"': '&quot;'
478
                }[tag]));
479
        }
480
469
        function add_alias(){
481
        function add_alias(){
470
            let alias = $("#new_alias").val();
482
            let alias = $("#new_alias").val();
471
            if ( !alias.length > 0 ) { return }
483
            if ( !alias.length > 0 ) { return }
Lines 475-482 Link Here
475
        function refresh_aliases(){
487
        function refresh_aliases(){
476
            let nodes = $("<div></div>");
488
            let nodes = $("<div></div>");
477
            aliases.forEach((a, i) => {
489
            aliases.forEach((a, i) => {
478
                let n = $("<div></div>").append(a.alias);
490
                let alias_str = encodeHTMLEntities(a.alias);
479
                n.append(`<input type="hidden" name="alias" value="${a.alias}">`)
491
                let n = $("<div></div>").append(alias_str);
492
                let input = $('<input type="hidden" name="alias" />');
493
                input.val(a.alias);
494
                n.append(input);
480
                n.append(`<a onclick="remove_alias(${i});"><i class="fa fa-trash" aria-hidden="true"></i></a>`);
495
                n.append(`<a onclick="remove_alias(${i});"><i class="fa fa-trash" aria-hidden="true"></i></a>`);
481
                nodes.append(n);
496
                nodes.append(n);
482
            });
497
            });
483
- 

Return to bug 33103