From 93fee65ad3edc61a36c5699490bbcc6441102b65 Mon Sep 17 00:00:00 2001
From: tipaul <tipaul>
Date: Fri, 4 Jul 2003 14:03:44 +0000
Subject: [PATCH] fix for #478 in parameters section

---
 .../default/en/parameters/aqbookfund.tmpl              |  2 +-
 .../default/en/parameters/authorised_values.tmpl       |  2 +-
 .../intranet-tmpl/default/en/parameters/categorie.tmpl |  2 +-
 .../default/en/parameters/categoryitem.tmpl            |  2 +-
 .../intranet-tmpl/default/en/parameters/itemtypes.tmpl |  2 +-
 .../en/parameters/marc_subfields_structure.tmpl        |  4 ++--
 .../default/en/parameters/marctagstructure.tmpl        |  4 ++--
 .../default/en/parameters/systempreferences.tmpl       |  4 ++--
 .../intranet-tmpl/default/en/parameters/thesaurus.tmpl | 10 +++++-----
 .../default/fr/parameters/aqbookfund.tmpl              |  2 +-
 .../default/fr/parameters/authorised_values.tmpl       |  2 +-
 .../intranet-tmpl/default/fr/parameters/branches.tmpl  |  2 +-
 .../intranet-tmpl/default/fr/parameters/categorie.tmpl |  2 +-
 .../fr/parameters/marc_subfields_structure.tmpl        |  4 ++--
 .../default/fr/parameters/marctagstructure.tmpl        |  4 ++--
 .../intranet-tmpl/default/fr/parameters/thesaurus.tmpl |  4 ++--
 16 files changed, 26 insertions(+), 26 deletions(-)

diff --git a/koha-tmpl/intranet-tmpl/default/en/parameters/aqbookfund.tmpl b/koha-tmpl/intranet-tmpl/default/en/parameters/aqbookfund.tmpl
index b572df7bff..7c20ef5ffe 100644
--- a/koha-tmpl/intranet-tmpl/default/en/parameters/aqbookfund.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/en/parameters/aqbookfund.tmpl
@@ -110,7 +110,7 @@
 <TMPL_ELSE>
 <tr><td>Book fund</td><td><input type=text name=bookfundid size=5 maxlength=5 onBlur=toUC(this)></td></tr>
 </TMPL_IF>
-<tr><td>Name</td><td><input type=text name=bookfundname size=40 maxlength=80 value='<TMPL_VAR name="bookfundname">'>&nbsp;</td></tr>
+<tr><td>Name</td><td><input type=text name=bookfundname size=40 maxlength=80 value='<TMPL_VAR name="bookfundname" escape=HTML>'>&nbsp;</td></tr>
 <tr><td>&nbsp;</td><td><INPUT type=button value='OK' onClick='Check(this.form)'></td></tr>
 </table>
 </form>
diff --git a/koha-tmpl/intranet-tmpl/default/en/parameters/authorised_values.tmpl b/koha-tmpl/intranet-tmpl/default/en/parameters/authorised_values.tmpl
index 452a68308b..28ee361bd9 100644
--- a/koha-tmpl/intranet-tmpl/default/en/parameters/authorised_values.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/en/parameters/authorised_values.tmpl
@@ -12,7 +12,7 @@
 	</tr>
 	<tr>
 		<td>Authorised value</td>
-		<td><input type=text name="authorised_value" value='<TMPL_VAR name="authorised_value">'></td>
+		<td><input type=text name="authorised_value" value='<TMPL_VAR name="authorised_value" escape=HTML>'></td>
 	</tr>
 	<tr>
 		<td>Lib</td>
diff --git a/koha-tmpl/intranet-tmpl/default/en/parameters/categorie.tmpl b/koha-tmpl/intranet-tmpl/default/en/parameters/categorie.tmpl
index 82e3dd4498..0e74c026d9 100644
--- a/koha-tmpl/intranet-tmpl/default/en/parameters/categorie.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/en/parameters/categorie.tmpl
@@ -90,7 +90,7 @@
 		<tr>
 			<td>Description</td>
 			<td>
-				<input type=text name=description size=40 maxlength=80 value=<TMPL_VAR NAME=description>>
+				<input type=text name=description size=40 maxlength=80 value=<TMPL_VAR NAME=description escape=HTML>>
 				&nbsp;
 			</td>
 		</tr>
diff --git a/koha-tmpl/intranet-tmpl/default/en/parameters/categoryitem.tmpl b/koha-tmpl/intranet-tmpl/default/en/parameters/categoryitem.tmpl
index c6a6b10f6c..9ca7bbab05 100644
--- a/koha-tmpl/intranet-tmpl/default/en/parameters/categoryitem.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/en/parameters/categoryitem.tmpl
@@ -87,7 +87,7 @@
                 <tr>
                         <td>Description</td>
                         <td>
-                                <input type=text name=description size=40 maxlength=80 value=<TMPL_VAR NAME=description>>
+                                <input type=text name=description size=40 maxlength=80 value=<TMPL_VAR NAME=description escape=HTML>>
                                 &nbsp;
                         </td>
                 </tr>
diff --git a/koha-tmpl/intranet-tmpl/default/en/parameters/itemtypes.tmpl b/koha-tmpl/intranet-tmpl/default/en/parameters/itemtypes.tmpl
index 4579a189fb..e69c3b2eed 100644
--- a/koha-tmpl/intranet-tmpl/default/en/parameters/itemtypes.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/en/parameters/itemtypes.tmpl
@@ -76,7 +76,7 @@ function Check(f) {
 			</TMPL_IF>
 			<tr>
 				<td>Description</td>
-				<td><input type=text name=description size=40 maxlength=80 value='<TMPL_VAR name="description">'>&nbsp;</td>
+				<td><input type=text name=description size=40 maxlength=80 value='<TMPL_VAR name="description" escape=HTML>'>&nbsp;</td>
 			</tr>
 			<tr>
 				<td>Loan length</td>
diff --git a/koha-tmpl/intranet-tmpl/default/en/parameters/marc_subfields_structure.tmpl b/koha-tmpl/intranet-tmpl/default/en/parameters/marc_subfields_structure.tmpl
index e5717998d5..29adffb708 100644
--- a/koha-tmpl/intranet-tmpl/default/en/parameters/marc_subfields_structure.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/en/parameters/marc_subfields_structure.tmpl
@@ -21,8 +21,8 @@
 	<TMPL_LOOP name="loop">
 		<tr valign=top bgcolor='<TMPL_VAR name="bgcolor">'>
 		<td><TMPL_VAR name="tagfield"> - <TMPL_VAR name="tagsubfield"></td>
-		<td><input type=text name="liblibrarian" value='<TMPL_VAR name="liblibrarian">' size=40 maxlength=80><br/>
-				<input type=text name="libopac" value='<TMPL_VAR name="libopac">' size=40 maxlength=80></td>
+		<td><input type=text name="liblibrarian" value='<TMPL_VAR name="liblibrarian" escape=HTML>' size=40 maxlength=80><br/>
+				<input type=text name="libopac" value='<TMPL_VAR name="libopac" escape=HTML>' size=40 maxlength=80></td>
 		<td><TMPL_VAR name="repeatable"></td>
 		<td><TMPL_VAR name="mandatory"></td>
 		<td><TMPL_VAR name="kohafield"></td>
diff --git a/koha-tmpl/intranet-tmpl/default/en/parameters/marctagstructure.tmpl b/koha-tmpl/intranet-tmpl/default/en/parameters/marctagstructure.tmpl
index de712a1c71..bc84a765d0 100644
--- a/koha-tmpl/intranet-tmpl/default/en/parameters/marctagstructure.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/en/parameters/marctagstructure.tmpl
@@ -58,8 +58,8 @@
 	<input type=hidden name=op value='add_validate'>
 	<table>
 	<tr><td>Tag</td><td><TMPL_VAR name="searchfield"></td></tr>
-	<tr><td>Lib for librarians</td><td><input type="text" name="liblibrarian" value='<TMPL_VAR name="liblibrarian">' size=80 maxlength=100></td></tr>
-	<tr><td>Lib for opac</td><td><input type="text" name="libopac" value='<TMPL_VAR name="libopac">' size=80 maxlength=100></td></tr>
+	<tr><td>Lib for librarians</td><td><input type="text" name="liblibrarian" value='<TMPL_VAR name="liblibrarian" escape=HTML>' size=80 maxlength=100></td></tr>
+	<tr><td>Lib for opac</td><td><input type="text" name="libopac" value='<TMPL_VAR name="libopac" escape=HTML>' size=80 maxlength=100></td></tr>
 	<tr><td>Repeatable</td><td><TMPL_VAR name="repeatable"></td></tr>
 	<tr><td>Mandatory</td><td><TMPL_VAR name="mandatory"></td></tr>
 	<tr><td>Authorised value</td><td><TMPL_VAR name="authorised_value"> (if you select a value here, the indicators will be limited to the authorised value list)</td></tr>
diff --git a/koha-tmpl/intranet-tmpl/default/en/parameters/systempreferences.tmpl b/koha-tmpl/intranet-tmpl/default/en/parameters/systempreferences.tmpl
index 5f68865cda..94e85d48e9 100644
--- a/koha-tmpl/intranet-tmpl/default/en/parameters/systempreferences.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/en/parameters/systempreferences.tmpl
@@ -69,8 +69,8 @@
 	<TMPL_ELSE>
 		<tr><td>Variable</td><td><input type=text name=variable></td></tr>
 	</TMPL_IF>
-	<tr><td>Value</td><td><input type=text name=value value='<TMPL_VAR name="value">'></td></tr>
-	<tr><td>Explanation</td><td><input type=text name=explanation size=80 value='<TMPL_VAR name="explanation">'></td></tr>
+	<tr><td>Value</td><td><input type=text name=value value='<TMPL_VAR name="value" escape=HTML>'></td></tr>
+	<tr><td>Explanation</td><td><input type=text name=explanation size=80 value='<TMPL_VAR name="explanation" escape=HTML>'></td></tr>
 	<tr><td>&nbsp;</td><td><INPUT type=button value='OK' onClick='Check(this.form)'></td></tr>
 	</table>
 	</form>
diff --git a/koha-tmpl/intranet-tmpl/default/en/parameters/thesaurus.tmpl b/koha-tmpl/intranet-tmpl/default/en/parameters/thesaurus.tmpl
index a4445d17ac..58e9473654 100644
--- a/koha-tmpl/intranet-tmpl/default/en/parameters/thesaurus.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/en/parameters/thesaurus.tmpl
@@ -51,21 +51,21 @@
 		<TMPL_IF name="id">
 			<td><TMPL_VAR name="father"><TMPL_VAR name="stdlib"><input type="hidden" name="stdlib" value="<TMPL_VAR name="stdlib">" ></td>
 		<TMPL_ELSE>
-			<td><TMPL_VAR name="father"><input type="text" name="stdlib" value="<TMPL_VAR name="stdlib">" maxlength="80" size="80"></td>
+			<td><TMPL_VAR name="father"><input type="text" name="stdlib" value="<TMPL_VAR name="stdlib" escape=HTML>" maxlength="80" size="80"></td>
 		</TMPL_IF>
 	</tr>
 	<tr>
 		<td>Other lib</td>
-		<td><TMPL_VAR name="father"><input type="text" name="freelib" value="<TMPL_VAR name="freelib">" maxlength="80" size="80"></td>
+		<td><TMPL_VAR name="father"><input type="text" name="freelib" value="<TMPL_VAR name="freelib" escape=HTML>" maxlength="80" size="80"></td>
 	</tr>
 	<tr>
 		<td>&nbsp;</td>
 		<td><input type="hidden" name="id" value="<TMPL_VAR name="id">">
-			<input type="hidden" name="father" value="<TMPL_VAR name="father">">
-			<input type="hidden" name="branch" value="<TMPL_VAR name="branch">">
+			<input type="hidden" name="father" value="<TMPL_VAR name="father" escape=HTML>">
+			<input type="hidden" name="branch" value="<TMPL_VAR name="branch" escape=HTML>">
 			<input type="hidden" name="toponly" value="<TMPL_VAR name="toponly">">
 			<input type="hidden" name="search_category" value="<TMPL_VAR name="search_category">">
-			<input type="hidden" name="searchstring" value="<TMPL_VAR name="searchstring">">
+			<input type="hidden" name="searchstring" value="<TMPL_VAR name="searchstring" escape=HTML>">
 			<input type="hidden" name="offset" value="<TMPL_VAR name="offset">">
 			<INPUT type="submit" value='OK'></td>
 	</tr>
diff --git a/koha-tmpl/intranet-tmpl/default/fr/parameters/aqbookfund.tmpl b/koha-tmpl/intranet-tmpl/default/fr/parameters/aqbookfund.tmpl
index a9a85ed5f1..72f6729ea3 100644
--- a/koha-tmpl/intranet-tmpl/default/fr/parameters/aqbookfund.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/fr/parameters/aqbookfund.tmpl
@@ -117,7 +117,7 @@
 </TMPL_IF>
 <tr>
       <td>Nom</td>
-      <td><input type=text name=bookfundname size=40 maxlength=80 value='<TMPL_VAR name="bookfundname">'>&nbsp;</td></tr>
+      <td><input type=text name=bookfundname size=40 maxlength=80 value='<TMPL_VAR name="bookfundname" escape=HTML>'>&nbsp;</td></tr>
 <tr>
       <td>Groupe</td>
       <td><input type=text name=bookfundgroup value='<TMPL_VAR name="bookfundgroup">'></td></tr>
diff --git a/koha-tmpl/intranet-tmpl/default/fr/parameters/authorised_values.tmpl b/koha-tmpl/intranet-tmpl/default/fr/parameters/authorised_values.tmpl
index 462438844c..b28a5ae1cf 100644
--- a/koha-tmpl/intranet-tmpl/default/fr/parameters/authorised_values.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/fr/parameters/authorised_values.tmpl
@@ -14,7 +14,7 @@
 	<tr>
 
       <td>Valeur autoris&eacute;e</td>
-		<td><input type=text name="authorised_value" value='<TMPL_VAR name="authorised_value">'></td>
+		<td><input type=text name="authorised_value" value='<TMPL_VAR name="authorised_value" escape=HTML>'></td>
 	</tr>
 	<tr>
 		<td>Lib</td>
diff --git a/koha-tmpl/intranet-tmpl/default/fr/parameters/branches.tmpl b/koha-tmpl/intranet-tmpl/default/fr/parameters/branches.tmpl
index 65429b913f..6c128298e9 100644
--- a/koha-tmpl/intranet-tmpl/default/fr/parameters/branches.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/fr/parameters/branches.tmpl
@@ -17,7 +17,7 @@
 			</tr>
 			<tr>
 				<td>Nom</td>
-				<td><input type=text name=branchname size=40 maxlength=80 value='<TMPL_VAR name=branchname>'}'>&nbsp;</td>
+				<td><input type=text name=branchname size=40 maxlength=80 value='<TMPL_VAR name=branchname escape=HTML>'}'>&nbsp;</td>
 			</tr>
 			<FONT SIZE=6><em><TMPL_VAR name=head></em></FONT><br>
 			<tr>
diff --git a/koha-tmpl/intranet-tmpl/default/fr/parameters/categorie.tmpl b/koha-tmpl/intranet-tmpl/default/fr/parameters/categorie.tmpl
index d776eba69a..7ee088e18c 100644
--- a/koha-tmpl/intranet-tmpl/default/fr/parameters/categorie.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/fr/parameters/categorie.tmpl
@@ -89,7 +89,7 @@
 		<tr>
 			<td>Description</td>
 			<td>
-				<input type=text name=description size=40 maxlength=80 value=<TMPL_VAR NAME=description>>
+				<input type=text name=description size=40 maxlength=80 value=<TMPL_VAR NAME=description escape=HTML>>
 				&nbsp;
 			</td>
 		</tr>
diff --git a/koha-tmpl/intranet-tmpl/default/fr/parameters/marc_subfields_structure.tmpl b/koha-tmpl/intranet-tmpl/default/fr/parameters/marc_subfields_structure.tmpl
index 773505416a..f77fb8f3e6 100644
--- a/koha-tmpl/intranet-tmpl/default/fr/parameters/marc_subfields_structure.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/fr/parameters/marc_subfields_structure.tmpl
@@ -24,8 +24,8 @@
 	<TMPL_LOOP name="loop">
 		<tr valign=top bgcolor='<TMPL_VAR name="bgcolor">'>
 		<td><TMPL_VAR name="tagfield"> - <TMPL_VAR name="tagsubfield"></td>
-		<td><input type=text name="liblibrarian" value='<TMPL_VAR name="liblibrarian">' size=40 maxlength=80><br/>
-				<input type=text name="libopac" value='<TMPL_VAR name="libopac">' size=40 maxlength=80></td>
+		<td><input type=text name="liblibrarian" value='<TMPL_VAR name="liblibrarian" escape=HTML>' size=40 maxlength=80><br/>
+				<input type=text name="libopac" value='<TMPL_VAR name="libopac" escape=HTML>' size=40 maxlength=80></td>
 		<td><TMPL_VAR name="repeatable"></td>
 		<td><TMPL_VAR name="mandatory"></td>
 		<td><TMPL_VAR name="kohafield"></td>
diff --git a/koha-tmpl/intranet-tmpl/default/fr/parameters/marctagstructure.tmpl b/koha-tmpl/intranet-tmpl/default/fr/parameters/marctagstructure.tmpl
index 873e8682f8..597e9d364f 100644
--- a/koha-tmpl/intranet-tmpl/default/fr/parameters/marctagstructure.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/fr/parameters/marctagstructure.tmpl
@@ -60,10 +60,10 @@
 	<tr><td>Champs</td><td><TMPL_VAR name="searchfield"></td></tr>
 	<tr>
       <td>Liblibrarian</td>
-      <td><input type="text" name="liblibrarian" value='<TMPL_VAR name="liblibrarian">' size=80 maxlength=100></td></tr>
+      <td><input type="text" name="liblibrarian" value='<TMPL_VAR name="liblibrarian" escape=HTML>' size=80 maxlength=100></td></tr>
 	<tr>
       <td>Libopac</td>
-      <td><input type="text" name="libopac" value='<TMPL_VAR name="libopac">' size=80 maxlength=100></td></tr>
+      <td><input type="text" name="libopac" value='<TMPL_VAR name="libopac" escape=HTML>' size=80 maxlength=100></td></tr>
 	<tr>
       <td>Incrementation</td>
       <td><TMPL_VAR name="repeatable"></td></tr>
diff --git a/koha-tmpl/intranet-tmpl/default/fr/parameters/thesaurus.tmpl b/koha-tmpl/intranet-tmpl/default/fr/parameters/thesaurus.tmpl
index a9ce09ad51..634562ee77 100644
--- a/koha-tmpl/intranet-tmpl/default/fr/parameters/thesaurus.tmpl
+++ b/koha-tmpl/intranet-tmpl/default/fr/parameters/thesaurus.tmpl
@@ -53,13 +53,13 @@
 		<TMPL_IF name="id">
 			<td><TMPL_VAR name="father"><TMPL_VAR name="stdlib"><input type="hidden" name="stdlib" value="<TMPL_VAR name="stdlib">" ></td>
 		<TMPL_ELSE>
-			<td><TMPL_VAR name="father"><input type="text" name="stdlib" value="<TMPL_VAR name="stdlib">" maxlength="80" size="80"></td>
+			<td><TMPL_VAR name="father"><input type="text" name="stdlib" value="<TMPL_VAR name="stdlib" escape=HTML>" maxlength="80" size="80"></td>
 		</TMPL_IF>
 	</tr>
 	<tr>
 
       <td>Autre forme</td>
-		<td><TMPL_VAR name="father"><input type=text name="freelib" value='<TMPL_VAR name="freelib">' maxlength="80" size="80"></td>
+		<td><TMPL_VAR name="father"><input type=text name="freelib" value='<TMPL_VAR name="freelib" escape=HTML>' maxlength="80" size="80"></td>
 	</tr>
 	<tr>
 		<td>&nbsp;</td>
-- 
2.39.5