From 1ebc373d18c82c331c125b073b0721638d6855cc Mon Sep 17 00:00:00 2001
From: Joe Atzberger <joe.atzberger@liblime.com>
Date: Fri, 23 May 2008 02:40:49 -0500
Subject: [PATCH] Unescape Comment, now that we trust Scrubber to block bad
 markup.

Obviously if we are going to allow good markup, we can't then escape it.
Documentation reference: allowed tags for comments are:
	br b i em big small strong

Signed-off-by: Joshua Ferraro <jmf@liblime.com>
---
 C4/Scrubber.pm                                       | 4 ++--
 koha-tmpl/opac-tmpl/prog/en/modules/opac-detail.tmpl | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/C4/Scrubber.pm b/C4/Scrubber.pm
index e8e4023710..c1505588d2 100644
--- a/C4/Scrubber.pm
+++ b/C4/Scrubber.pm
@@ -26,7 +26,7 @@ use vars qw($VERSION @ISA);
 use vars qw(%scrubbertypes $scrubbertype);
 
 BEGIN {
-	$VERSION = 0.01;
+	$VERSION = 0.02;
 	# @ISA = qw(HTML::Scrubber);
 }
 
@@ -35,7 +35,7 @@ INIT {
 		default => {},	# place holder, default settings are below as fallbacks in call to constructor
 		    tag => {},	# uses defaults
 		comment => {
-			allow   => [qw( br b i em big small )],
+			allow   => [qw( br b i em big small strong )],
 		},
 		staff   => {
 			default => [ 1 =>{'*'=>1} ],
diff --git a/koha-tmpl/opac-tmpl/prog/en/modules/opac-detail.tmpl b/koha-tmpl/opac-tmpl/prog/en/modules/opac-detail.tmpl
index 285b209916..83c4309478 100755
--- a/koha-tmpl/opac-tmpl/prog/en/modules/opac-detail.tmpl
+++ b/koha-tmpl/opac-tmpl/prog/en/modules/opac-detail.tmpl
@@ -422,7 +422,7 @@
 			</h5>
 			<small><!-- TMPL_VAR NAME="datereviewed" --></small>
         <p>
-          <!-- TMPL_VAR NAME="review" ESCAPE="HTML" -->
+          <!-- TMPL_VAR NAME="review" ESCAPE=0 -->
 		  <a href="#" onclick="Dopop('/cgi-bin/koha/opac-review.pl?biblionumber=<!-- TMPL_VAR NAME="biblionumber"-->&amp;reviewid=<!-- TMPL_VAR NAME="reviewid" -->');">Edit</a>
         </p></div>
 			<!-- TMPL_ELSE -->
@@ -435,7 +435,7 @@
             </h5>
 			<small><!-- TMPL_VAR NAME="datereviewed" --></small>
         <p>
-          <!-- TMPL_VAR NAME="review" ESCAPE="HTML" -->
+          <!-- TMPL_VAR NAME="review" ESCAPE=0 -->
         </p></div>
 			<!-- /TMPL_IF -->
         <!-- /TMPL_LOOP -->
-- 
2.39.5