@@ -, +, @@ --- koha-tmpl/intranet-tmpl/prog/js/holds.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/koha-tmpl/intranet-tmpl/prog/js/holds.js +++ a/koha-tmpl/intranet-tmpl/prog/js/holds.js @@ -162,13 +162,13 @@ $(document).ready(function() { if ( oObj.waiting_here ) { data += __("Item is waiting here"); if (oObj.desk_name) { - data += ", " + __("at %s").format(oObj.desk_name); + data += ", " + __("at %s").format(oObj.desk_name.escapeHtml()); } } else { data += __("Item is waiting"); data += " " + __("at %s").format(oObj.waiting_at); if (oObj.desk_name) { - data += ", " + __("at %s").format(oObj.desk_name); + data += ", " + __("at %s").format(oObj.desk_name.escapeHtml()); } } --