From ac37a225680c361ae960b6a9860e51af141440eb Mon Sep 17 00:00:00 2001 From: Didier Gautheron Date: Mon, 27 Apr 2020 14:42:49 +0200 Subject: [PATCH] Bug 25291: Escape barcode in ReturnClaims table display Test Plan: 1) Set ClaimReturnedLostValue 2) Create a checkout 3) Claim a return 4) Change the barcode to something with html inside, will do Without this patch cgi-bin/koha/members/moremember.pl claim tab barcode link is broken. Signed-off-by: Kyle M Hall Signed-off-by: Jonathan Druart --- koha-tmpl/intranet-tmpl/prog/js/checkouts.js | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/koha-tmpl/intranet-tmpl/prog/js/checkouts.js b/koha-tmpl/intranet-tmpl/prog/js/checkouts.js index 8f93aadaf8..1b9b4a213d 100644 --- a/koha-tmpl/intranet-tmpl/prog/js/checkouts.js +++ b/koha-tmpl/intranet-tmpl/prog/js/checkouts.js @@ -908,7 +908,13 @@ $(document).ready(function() { if ( oObj.author ) { title += ' by ' + oObj.author; } - title += ' ' + oObj.barcode + ''; + title += ' ' + + (oObj.barcode ? oObj.barcode.escapeHtml() : "") + + ''; return title; } -- 2.20.1