Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity
Koha/koha-tmpl/intranet-tmpl/prog/en/modules/admin
History
Fridolin Somers be18ee7aa5 Bug 29853: Add HTML filter before KohaSpan filter 
Usage of Template Toolkit plugin KohaSpan as filter is actually :
  Group [% added.title | $KohaSpan class = 'name' | $raw %] created.

But KohaSpan filter does not escape HTML characters.
Whe should filter HTML then KohaSpan.

This patch adds TT html filter before KohaSpan.
Also replaces in Javascript html() with text()
to ensure special caracters are still encoded.
See https://api.jquery.com/text/

Test plan :
1) Create a library with name Libra'rie
2) Create a library group with name Grou'pe
3) Play with this group
4) Add library
5) Remove library
6) Edit group
7) Delete group
8) Each time check that &apos, is not interpreted as single quote

Signed-off-by: Solène Desvaux <solene.desvaux@biblibre.com>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
2022-02-21 15:15:47 -10:00
..
preferences Bug 29617: exclude categorycode from BorrowerUnwantedField 2022-02-16 11:51:11 -10:00
searchengine/elasticsearch Bug 29010: (QA follow-up) Change inputmode from numeric to decimal 2021-11-22 11:13:10 +01:00
additional-fields.tt Bug 29052: Make consistent use of spans and div with hint class 2021-10-21 12:24:04 +02:00
admin-home.tt Bug 14957: (QA follow-up) Rename and move admin link 2021-10-26 16:46:03 +02:00
adveditorshortcuts.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
aqbudgetperiods.tt Bug 29240: Rename start_for with date_to 2021-10-19 14:08:09 +02:00
aqbudgets.tt Bug 28223: Add data elements to negative budgets 2021-04-27 16:23:49 +02:00
aqcontract.tt Bug 29240: Rename start_for with date_to 2021-10-19 14:08:09 +02:00
aqplan.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
audio_alerts.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
auth_subfields_structure.tt Bug 29052: Make consistent use of spans and div with hint class 2021-10-21 12:24:04 +02:00
auth_tag_structure.tt Bug 29052: Make consistent use of spans and div with hint class 2021-10-21 12:24:04 +02:00
authorised_values.tt Bug 7374: Add remote image option for authorized values 2022-02-10 14:44:23 -10:00
authtypes.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
background_jobs.tt Bug 28445: Use the task queue for the batch delete and update items tool 2021-10-18 11:28:40 +02:00
biblio_framework.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
branch_transfer_limits.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
branches.tt Bug 29859: Use iterator instead of as_list 2022-02-09 15:36:23 -10:00
cash_registers.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
categories.tt Bug 29735: Remove flatpickr init from categories.js and holds.js 2022-01-13 16:37:33 -10:00
checkmarc.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
cities.tt Bug 29408: Update all existing uses of .api to .kohaTable 2021-11-15 12:38:39 +01:00
classsources.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
clone-rules.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
columns_settings.tt Bug 28438: Capitalization: Various corrections 2021-09-28 15:12:45 +02:00
credit_types.tt Bug 29052: Make consistent use of spans and div with hint class 2021-10-21 12:24:04 +02:00
currency.tt Bug 26703: (follow-up) corrected currencies title 2021-04-21 11:16:35 +02:00
debit_types.tt Bug 29052: Make consistent use of spans and div with hint class 2021-10-21 12:24:04 +02:00
desks.tt Bug 29832: Use KohaTable 2022-02-10 14:44:23 -10:00
didyoumean.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
edi_accounts.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
edi_ean_accounts.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
item_circulation_alerts.tt Bug 29277: Replace the use of jQueryUI tabs on item circulation alerts page 2022-02-10 14:44:23 -10:00
items_search_field.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
items_search_fields.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
itemtypes.tt Bug 28913: Note cronjob on automatic return settings in itemtypes 2021-11-02 14:57:25 +01:00
koha2marclinks.tt Bug 29529: Fix \n in hint on Koha to MARC mappings 2021-12-01 21:47:18 -10:00
library_groups.tt Bug 29853: Add HTML filter before KohaSpan filter 2022-02-21 15:15:47 -10:00
localization.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
marc-overlay-rules.tt Bug 14957: (QA follow-up) Fix for jQuery undefined 2021-10-26 16:46:03 +02:00
marc_subfields_structure.tt Bug 29052: Make consistent use of spans and div with hint class 2021-10-21 12:24:04 +02:00
marctagstructure.tt Bug 28207: Fix biblio_framework.frameworktext isn't in GROUP BY 2021-04-30 17:07:32 +02:00
matching-rules.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
oai_set_mappings.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
oai_sets.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
overdrive.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
patron-attr-types.tt Bug 29052: Make consistent use of spans and div with hint class 2021-10-21 12:24:04 +02:00
preferences.tt Bug 26102: Prevent XSS when To.json is used: admin/preferences.tt 2022-02-02 21:05:29 -10:00
share_content.tt Bug 29052: Make consistent use of spans and div with hint class 2021-10-21 12:24:04 +02:00
smart-rules.tt Bug 29844: Fix selenium/administration_tasks.t 2022-02-11 09:11:39 -10:00
sms_providers.tt Bug 29859: Use iterator instead of as_list 2022-02-09 15:36:23 -10:00
smtp_servers.tt Bug 29408: Update all existing uses of .api to .kohaTable 2021-11-15 12:38:39 +01:00
sru_modmapping.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
sru_modmapping_auth.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
systempreferences.tt Bug 28438: Capitalization: Various corrections 2021-09-28 15:12:45 +02:00
transfer_limits.tt Bug 29513: Convert remaining breadcrumbs div blocks into nav 2021-12-01 21:38:12 -10:00
transport-cost-matrix.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
usage_statistics.tt Bug 26703: admin folder 2021-04-21 11:16:33 +02:00
z3950servers.tt Bug 29052: Make consistent use of spans and div with hint class 2021-10-21 12:24:04 +02:00