@@ -, +, @@ escape rendered values --- koha-tmpl/intranet-tmpl/prog/en/includes/holds_table.inc | 2 +- koha-tmpl/intranet-tmpl/prog/js/holds.js | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) --- a/koha-tmpl/intranet-tmpl/prog/en/includes/holds_table.inc +++ a/koha-tmpl/intranet-tmpl/prog/en/includes/holds_table.inc @@ -136,7 +136,7 @@ - + [% END %] [% END %] --- a/koha-tmpl/intranet-tmpl/prog/js/holds.js +++ a/koha-tmpl/intranet-tmpl/prog/js/holds.js @@ -308,7 +308,7 @@ $(document).ready(function() { var hold_id = $(this).data('hold_id'); $(".loading_"+hold_id).show(); var preselected = $(this).data('selected'); - var api_url = '/api/v1/holds/'+hold_id+'/pickup_locations'; + var api_url = '/api/v1/holds/' + encodeURIComponent(hold_id) + '/pickup_locations'; $.ajax({ method: "GET", url: api_url, @@ -318,7 +318,7 @@ $(document).ready(function() { if( preselected == library.library_id ){ selected = ' selected="selected" '; } else { selected = ""; } - dropdown += ''; + dropdown += ''; }); this_dropdown.html(dropdown); this_dropdown.data("loaded",1); --