From 64b3f8e79c077df9b9745ac92c9fede8e4e86ae3 Mon Sep 17 00:00:00 2001
From: Martin Renvoize <martin.renvoize@ptfs-europe.com>
Date: Thu, 21 Jan 2021 10:57:11 +0000
Subject: [PATCH] Bug 22752: (QA follow-up) Add missing filters

For security, we filter all template variables.

Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
---
 koha-tmpl/opac-tmpl/bootstrap/en/includes/holds-table.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/koha-tmpl/opac-tmpl/bootstrap/en/includes/holds-table.inc b/koha-tmpl/opac-tmpl/bootstrap/en/includes/holds-table.inc
index 5ce8d5c187..dfa096141c 100644
--- a/koha-tmpl/opac-tmpl/bootstrap/en/includes/holds-table.inc
+++ b/koha-tmpl/opac-tmpl/bootstrap/en/includes/holds-table.inc
@@ -59,7 +59,7 @@
                             [% END %]
                             [% HOLD.biblio.author | html %]
                             [% IF HOLD.item_level_hold %]
-                                Only item [% HOLD.item.barcode %]
+                                Only item [% HOLD.item.barcode | html %]
                             [% ELSE %]
                                 Next available item
                             [% END %]
-- 
2.20.1