From fe98beef015dc4839a2e6bbc6f4fc36c3f1c1eaa Mon Sep 17 00:00:00 2001 From: Martin Renvoize Date: Mon, 19 May 2025 16:49:00 +0100 Subject: [PATCH] Bug 23978: (QA follow-up) Use html_scrubber This followup replaces the $raw filter with `scrub_html type => 'note' | $raw`. --- .../en/modules/reports/guided_reports_start.tt | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/guided_reports_start.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/reports/guided_reports_start.tt index c5d7536b572..880c7a7f5fe 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/guided_reports_start.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/reports/guided_reports_start.tt @@ -4,6 +4,7 @@ [% USE KohaDates %] [% USE Koha %] [% USE TablesSettings %] +[% USE HtmlScrubber %] [% USE JSON.Escape %] [% PROCESS 'i18n.inc' %] [% SET footerjs = 1 %] @@ -849,7 +850,7 @@ - + @@ -883,7 +884,7 @@

Enter parameters for report [% name | html %]:

[% IF ( notes ) %] -

[% notes | $raw %]

+

[% notes | scrub_html type => 'note' | $raw %]

[% END %]
    @@ -943,7 +944,7 @@ >
    [% IF ( notes ) %] -

    Notes: [% notes | $raw %]

    +

    Notes: [% notes | scrub_html type => 'note' | $raw %]

    [% END %] [% IF ( unlimited_total ) %]

    @@ -1415,7 +1416,7 @@ [% END # /IF (usecache) %]

  1. - +
@@ -1445,7 +1446,7 @@ [% IF saved_results %]

Saved report results

[% name | html %]

-

[% notes | $raw %]

+

[% notes | scrub_html type => 'note' | $raw %]

[% FOREACH rows IN saved_results %] @@ -1465,7 +1466,7 @@ [% IF ( notes ) %]
  • Notes: - [% notes | $raw %] + [% notes | scrub_html type => 'note' | $raw %]
  • [% ELSE %] @@ -1533,7 +1534,7 @@ [% END %]
  • - +
  • -- 2.49.0