View | Details | Raw Unified | Return to bug 36382
Collapse All | Expand All

(-)a/koha-tmpl/intranet-tmpl/prog/js/staff-global.js (-5 / +6 lines)
Lines 19-25 function formatstr(str, col) { Link Here
19
var HtmlCharsToEscape = {
19
var HtmlCharsToEscape = {
20
    '&': '&',
20
    '&': '&',
21
    '<': '&lt;',
21
    '<': '&lt;',
22
    '>': '&gt;'
22
    '>': '&gt;',
23
    "'": '&#39;',
24
    '"': '&quot;'
23
};
25
};
24
String.prototype.escapeHtml = function() {
26
String.prototype.escapeHtml = function() {
25
    return this.replace(/[&<>]/g, function(c) {
27
    return this.replace(/[&<>]/g, function(c) {
Lines 176-184 $(document).ready(function() { Link Here
176
            });
178
            });
177
179
178
            const previous_patron = {
180
            const previous_patron = {
179
                "borrowernumber": $("#hiddenborrowernumber").val(),
181
                "borrowernumber": escape_str($("#hiddenborrowernumber").val()),
180
                "name": $("#hiddenborrowername").val(),
182
                "name": escape_str($("#hiddenborrowername").val()),
181
                "card": $("#hiddenborrowercard").val()
183
                "card": escape_str($("#hiddenborrowercard").val())
182
            };
184
            };
183
185
184
            previous_patrons.unshift( previous_patron );
186
            previous_patrons.unshift( previous_patron );
185
- 

Return to bug 36382