From ebfd98650b6660bc02b7c8f252d0a59c4073791f Mon Sep 17 00:00:00 2001 From: Pedro Amorim Date: Mon, 19 Feb 2024 17:09:15 +0000 Subject: [PATCH] Bug 36047: filter jQuery selector through escapeHtml Signed-off-by: Phan Tung Bui --- koha-tmpl/intranet-tmpl/prog/en/modules/acqui/orderreceive.tt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/orderreceive.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/orderreceive.tt index eb834ea4c2..b53a18a7b8 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/orderreceive.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/acqui/orderreceive.tt @@ -696,7 +696,7 @@ if(row.biblio.suggestions.length && row.biblio.suggestions[0].reason) { params["suggestionid"] = row.biblio.suggestions[0].suggestion_id; - if($("#reason option[value='"+row.biblio.suggestions[0].reason+"']").length) { + if($("#reason option[value='"+row.biblio.suggestions[0].reason.escapeHtml()+"']").length) { params['reason'] = row.biblio.suggestions[0].reason; } else { params['reason'] = 'other'; @@ -1150,7 +1150,7 @@ } if(row.biblio.suggestions[0].reason) { $("#suggestion_reason").show(); - if($("#reason option[value='"+row.biblio.suggestions[0].reason+"']").length) { + if($("#reason option[value='"+row.biblio.suggestions[0].reason.escapeHtml()+"']").length) { $("#other_reason a").click(); $("#reason").val(row.biblio.suggestions[0].reason); $("#select-other_reason").val(null); -- 2.34.1