From efc6e01db5a44caf6653f25e22a8ad04d4cb7be9 Mon Sep 17 00:00:00 2001 From: Nick Clemens Date: Tue, 26 Apr 2022 10:56:52 +0000 Subject: [PATCH] Bug 27546: (follow-up) Escape new search string --- koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tt index a2d5c3e566..c1408856c7 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tt @@ -763,7 +763,7 @@ e.preventDefault(); var index = $("#refine_search #idx").val() || ""; if( index){index += ":";} - window.location.href = "/cgi-bin/koha/catalogue/search.pl?[% query_cgi | $raw %]&[% limit_cgi | $raw %]&[% sort_cgi | $raw %]&limit="+index+$("#refiner").val(); + window.location.href = "/cgi-bin/koha/catalogue/search.pl?[% query_cgi | $raw %]&[% limit_cgi | $raw %]&[% sort_cgi | $raw %]&limit="+index+escape_str( $("#refiner").val() ); }); [% Asset.js("js/pages/results.js") | $raw %] -- 2.30.2