Lines 19-25
function formatstr(str, col) {
Link Here
|
19 |
var HtmlCharsToEscape = { |
19 |
var HtmlCharsToEscape = { |
20 |
'&': '&', |
20 |
'&': '&', |
21 |
'<': '<', |
21 |
'<': '<', |
22 |
'>': '>' |
22 |
'>': '>', |
|
|
23 |
"'": ''', |
24 |
'"': '"' |
23 |
}; |
25 |
}; |
24 |
String.prototype.escapeHtml = function() { |
26 |
String.prototype.escapeHtml = function() { |
25 |
return this.replace(/[&<>]/g, function(c) { |
27 |
return this.replace(/[&<>]/g, function(c) { |
Lines 176-184
$(document).ready(function() {
Link Here
|
176 |
}); |
178 |
}); |
177 |
|
179 |
|
178 |
const previous_patron = { |
180 |
const previous_patron = { |
179 |
"borrowernumber": $("#hiddenborrowernumber").val(), |
181 |
"borrowernumber": escape_str($("#hiddenborrowernumber").val()), |
180 |
"name": $("#hiddenborrowername").val(), |
182 |
"name": escape_str($("#hiddenborrowername").val()), |
181 |
"card": $("#hiddenborrowercard").val() |
183 |
"card": escape_str($("#hiddenborrowercard").val()) |
182 |
}; |
184 |
}; |
183 |
|
185 |
|
184 |
previous_patrons.unshift( previous_patron ); |
186 |
previous_patrons.unshift( previous_patron ); |
185 |
- |
|
|