From dcbf2654c63d08f90f4c0a2c11e77c6ee00c5c9f Mon Sep 17 00:00:00 2001 From: Cory Jaeger Date: Sun, 19 Apr 2009 17:36:28 -0500 Subject: [PATCH] Bug 2847 - Fix html escaping in categorie.tmpl (more needed) Content-Type: text/plain; charset="utf-8" Added escape="html" to several TMPL_VAR tags which need it in order to deal with quotes and other special chars in user supplied data. Many other templates still need to have escaping added to fields which allow free form entry. --- .../prog/en/modules/admin/categorie.tmpl | 30 ++++++++++---------- 1 files changed, 15 insertions(+), 15 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/categorie.tmpl b/koha-tmpl/intranet-tmpl/prog/en/modules/admin/categorie.tmpl index 92f6e30..6e034e7 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/categorie.tmpl +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/admin/categorie.tmpl @@ -1,7 +1,7 @@ -Koha › Administration › Patron Categories › <!-- TMPL_IF NAME="add_form" --><!-- TMPL_IF NAME="categorycode" -->Modify category '<!-- TMPL_VAR NAME="categorycode" -->'<!-- TMPL_ELSE -->New category<!-- /TMPL_IF --><!-- /TMPL_IF --> +<title>Koha › Administration › Patron Categories › <!-- TMPL_IF NAME="add_form" --><!-- TMPL_IF NAME="categorycode" -->Modify category '<!-- TMPL_VAR NAME="categorycode" escape="html" -->'<!-- TMPL_ELSE -->New category<!-- /TMPL_IF --><!-- /TMPL_IF --> <!-- TMPL_IF NAME="add_validate" -->Data recorded<!-- /TMPL_IF --> -<!-- TMPL_IF NAME="delete_confirm" --><!-- TMPL_IF NAME="totalgtzero" -->Cannot Delete: Category <!-- TMPL_VAR NAME="categorycode" --> in Use<!-- TMPL_ELSE -->Confirm Deletion of Category '<!-- TMPL_VAR NAME="categorycode" -->'<!-- /TMPL_IF --><!-- /TMPL_IF --> +<!-- TMPL_IF NAME="delete_confirm" --><!-- TMPL_IF NAME="totalgtzero" -->Cannot Delete: Category <!-- TMPL_VAR NAME="categorycode" escape="html" --> in Use<!-- TMPL_ELSE -->Confirm Deletion of Category '<!-- TMPL_VAR NAME="categorycode" escape="html" -->'<!-- /TMPL_IF --><!-- /TMPL_IF --> <!-- TMPL_IF NAME="delete_confirmed" -->Category Deleted<!-- /TMPL_IF -->