Bugzilla – Attachment 89268 Details for
Bug 22781
Fields on patron search results should be html/json filtered
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 22781: Escape cardnumber, category's description, library's name and dateexpiry
Bug-22781-Escape-cardnumber-categorys-description-.patch (text/plain), 2.72 KB, created by
Jonathan Druart
on 2019-05-03 01:34:26 UTC
(
hide
)
Description:
Bug 22781: Escape cardnumber, category's description, library's name and dateexpiry
Filename:
MIME Type:
Creator:
Jonathan Druart
Created:
2019-05-03 01:34:26 UTC
Size:
2.72 KB
patch
obsolete
>From dbf7a87327189a2590a0266508ffc2954cf4f3c5 Mon Sep 17 00:00:00 2001 >From: Jonathan Druart <jonathan.druart@bugs.koha-community.org> >Date: Wed, 1 May 2019 20:28:04 -0400 >Subject: [PATCH] Bug 22781: Escape cardnumber, category's description, > library's name and dateexpiry > >This will fix the previous failure. Note that other fields like >borrowernumber, Price escaped values, integers, etc. could be escaped >the same way but will be useless (save polar bears). >--- > .../prog/en/modules/members/tables/members_results.tt | 8 ++++---- > 1 file changed, 4 insertions(+), 4 deletions(-) > >diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/members/tables/members_results.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/members/tables/members_results.tt >index 662f78bcf9..4b4129e1ea 100644 >--- a/koha-tmpl/intranet-tmpl/prog/en/modules/members/tables/members_results.tt >+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/members/tables/members_results.tt >@@ -15,17 +15,17 @@ > "<input type='checkbox' class='selection' name='borrowernumber' value='[% data.borrowernumber | html %]' />", > [% END %] > "dt_cardnumber": >- "[% data.cardnumber | html %]", >+ "[% data.cardnumber | html | $To %]", > "dt_name": > "<a href=\"/cgi-bin/koha/members/moremember.pl?borrowernumber=[% data.borrowernumber | html %]\" class=\"patron_preview\" data-borrowernumber=\"[% data.borrowernumber | html %]\" style='white-space:nowrap'>[% INCLUDE 'patron-title.inc' borrowernumber = data.borrowernumber category_type = data.category_type firstname = To.json(data.firstname) surname = To.json(data.surname) othernames = To.json(data.othernames) invert_name = 1 %]</a><br />[% INCLUDE escape_address data = data %][% IF data.email %]<br/>Email: <a href='mailto:[% data.email | html %]'>[% data.email | html %]</a>[% END %]", > "dt_dateofbirth": > "[% data.dateofbirth | $KohaDates %]", > "dt_category": >- "[% data.category_description | html %] ([% data.category_type | html %])", >+ "[% data.category_description | html | $To %] ([% data.category_type | html | $To %])", > "dt_branch": >- "[% data.branchname | html %]", >+ "[% data.branchname | html | $To %]", > "dt_dateexpiry": >- "[% data.dateexpiry | html %]", >+ "[% data.dateexpiry | html | $To %]", > "dt_od_checkouts": > "[% IF data.overdues %]<span class='overdue'><strong>[% data.overdues | html %]</strong></span>[% ELSE %][% data.overdues | html %][% END %] / [% data.issues | html %]", > "dt_fines": >-- >2.11.0
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 22781
:
89267
|
89268
|
89269
|
89270
|
89271
|
89395
|
89396
|
89397
|
89398
|
89399
|
89582
|
89583
|
89584
|
89585
|
89586