Bug 20945: Escape SQL parameters when constructing download links
authorNick Clemens <nick@bywatersolutions.com>
Thu, 14 Jun 2018 14:20:44 +0000 (14:20 +0000)
committerFridolin Somers <fridolin.somers@biblibre.com>
Wed, 4 Jul 2018 08:04:12 +0000 (10:04 +0200)
commita876da7c054a7c31adfd05ec090c0de2f341ff27
tree8ab84423f7914346291e04fc2ce1eea06aa3f721
parent0040d05a370bb8507cf2872dc808d3fdb262038b
Bug 20945: Escape SQL parameters when constructing download links

TO test:
1 - Create a report that takes a parameter
2 - Enter a parameter containing '%'
3 - Attempt to download report, note link is misconstructed
4 - Apply patch
5 - Reload
6 - Note URL is now correct

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
(cherry picked from commit 0557c0fd9c468fb32011897318fb239dcdc30bc8)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
koha-tmpl/intranet-tmpl/prog/en/includes/reports-toolbar.inc