@@ -, +, @@ --- koha-tmpl/intranet-tmpl/prog/js/staff-global.js | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) --- a/koha-tmpl/intranet-tmpl/prog/js/staff-global.js +++ a/koha-tmpl/intranet-tmpl/prog/js/staff-global.js @@ -19,10 +19,12 @@ function formatstr(str, col) { var HtmlCharsToEscape = { '&': '&', '<': '<', - '>': '>' + '>': '>', + "'": ''', + '"': '"' }; String.prototype.escapeHtml = function() { - return this.replace(/[&<>]/g, function(c) { + return this.replace(/["'&<>]/g, function(c) { return HtmlCharsToEscape[c] || c; }); }; --