e0e063a85b
To Test 1. Hit the page /cgi-bin/koha/members/memberentry.pl 2. Add a text in the field address, address2, city, state, country, zipcode, B_streetnumber, B_city, B_country, B_zipcode that contains js 3. Save the page. 4. Notice js is execute 5. Apply patch and reload, the js is escaped Signed-off-by: Chris Cormack <chris@bigballofwax.co.nz> Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org> Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
16 lines
778 B
HTML
16 lines
778 B
HTML
[% IF ( B_address or B_address2 ) %]
|
|
[% IF ( B_address ) %]
|
|
[% SET roadtype_desc = '' %]
|
|
[% IF B_streettype %]
|
|
[% SET roadtype_desc = AuthorisedValues.GetByCode('ROADTYPE', B_streettype) %]
|
|
[% END %]
|
|
<li class="patronaddress1">[% if (B_streetnumber) %][% B_streetnumber |html %][% end %] [% B_address |html %] [% IF roadtype_desc %][% roadtype_desc |html %] [% END %][% end %]</li>
|
|
[% END %]
|
|
[% IF ( B_address2 ) %]
|
|
<li class="patronaddress2">[% B_address2 |html %]</li>
|
|
[% END %]
|
|
[% END %]
|
|
[% IF ( B_city ) %]<li class="patroncity">
|
|
[% B_city |html %][% IF ( B_state ) %], [% B_state |html %][% END %]
|
|
[% B_zipcode |html %][% IF ( B_country ) %], [% B_country |html %][% END %]</li>
|
|
[% END %]
|