@@ -, +, @@
---
koha-tmpl/intranet-tmpl/prog/js/holds.js | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
--- a/koha-tmpl/intranet-tmpl/prog/js/holds.js
+++ a/koha-tmpl/intranet-tmpl/prog/js/holds.js
@@ -162,13 +162,13 @@ $(document).ready(function() {
if ( oObj.waiting_here ) {
data += __("Item is waiting here");
if (oObj.desk_name) {
- data += ", " + __("at %s").format(oObj.desk_name);
+ data += ", " + __("at %s").format(oObj.desk_name.escapeHtml());
}
} else {
data += __("Item is waiting");
data += " " + __("at %s").format(oObj.waiting_at);
if (oObj.desk_name) {
- data += ", " + __("at %s").format(oObj.desk_name);
+ data += ", " + __("at %s").format(oObj.desk_name.escapeHtml());
}
}
--