From 32421f8de6e09453d78ec4ae511b7ffb888bff2f Mon Sep 17 00:00:00 2001
From: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Date: Tue, 10 Mar 2020 12:19:54 +0100
Subject: [PATCH] Bug 18127: Add missing html filters

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
---
 .../prog/en/modules/tools/batch_record_modification.tt        | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batch_record_modification.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batch_record_modification.tt
index 960217a9c9..66de6f4b1c 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batch_record_modification.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batch_record_modification.tt
@@ -269,7 +269,7 @@
                                     <select name="add_bibs_to_list" id="add_bibs_to_list">
                                         <option value="">Select a list</option>
                                         [% FOREACH list IN lists %]
-                                            <option class="shelf" value="[% list.shelfnumber %]">[% list.shelfname %]</option>
+                                            <option class="shelf" value="[% list.shelfnumber | html %]">[% list.shelfname | html %]</option>
                                         [% END %]
                                     </select>
                                 </li>
@@ -401,7 +401,7 @@
                     var bibs = new Array();
                     [% FOREACH message IN messages %]
                         [% IF message.code == 'biblio_modified' %]
-                            bibs.push("biblionumber="+[% message.biblionumber %]);
+                            bibs.push("biblionumber="+[% message.biblionumber | html %]);
                         [% END %]
                     [% END %]
                     var bibstring = bibs.join("&");
-- 
2.39.5