Bug 41529 - HTML code visible in the table listing saved reports
Summary: HTML code visible in the table listing saved reports
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Reports (show other bugs)
Version: unspecified
Hardware: All All
: P5 - low enhancement
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-01-06 08:42 UTC by Ray Delahunty
Modified: 2026-01-06 22:27 UTC (History)
2 users (show)

See Also:
GIT URL:
Initiative type: ---
Sponsorship status: ---
Comma delimited list of Sponsors:
Crowdfunding goal: 0
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments
With and without JQuery, in 25.11 (77.53 KB, application/vnd.openxmlformats-officedocument.wordprocessingml.document)
2026-01-06 08:42 UTC, Ray Delahunty
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Ray Delahunty 2026-01-06 08:42:12 UTC
Created attachment 190917 [details]
With and without JQuery, in 25.11

From 25.11 Bug 23978 allows for HTML to be added to the Notes field in reports but the HTML tags appear in the reports list view, making identification of the desired report (and understanding what the report identifies) harder. This was not the case in 24:11 (for example) where using the code listed in the JQuery Library (‘Render patron messages as HTML and in Report notes’) saw the Notes column rendered with the HTML applied, not with HTML code showing. Adding this code to IntranetUserJS in 25.11 sees the Notes field in the list view rendered correctly without the HTML code visible.
Comment 1 David Cook 2026-01-06 22:27:30 UTC
Not 100% sure what you're saying here, but it looks like the datatable in reports list view has escaped the notes for years: [% savedreport.notes | html %]

Overall, it's not great putting HTML into DataTables. Although in this case, I suppose the "note" HTML scrubber would probably prevent problems.

I've had other local cases where allowing HTML into the DataTable has managed to break the datatable.