[Koha-patches] [PATCH] Escaping HTML in the search results in the Librarian interface

[Chris Cormack]

---
 .../prog/en/modules/catalogue/results.tmpl         |    6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tmpl 
b/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tmpl
index 64694c8..def42f3 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tmpl
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tmpl
@@ -118,7 +118,7 @@ function yuiZ3950button() {
 <!-- TMPL_INCLUDE NAME="header.inc" -->
 <!-- TMPL_INCLUDE NAME="cat-search.inc" -->
 
-<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a 
href="/cgi-bin/koha/catalogue/search.pl">Catalog</a>  &rsaquo; Search <!-- 
TMPL_IF NAME="query_desc" -->for '<!-- TMPL_VAR NAME="query_desc" -->'<!-- 
/TMPL_IF --><!-- TMPL_IF NAME="limit_desc" -->&nbsp;with limit(s):&nbsp;'<!-- 
TMPL_VAR NAME="limit_desc" -->'<!-- /TMPL_IF --></div>
+<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a 
href="/cgi-bin/koha/catalogue/search.pl">Catalog</a>  &rsaquo; Search <!-- 
TMPL_IF NAME="query_desc" -->for '<!-- TMPL_VAR NAME="query_desc" 
ESCAPE="html"-->'<!-- /TMPL_IF --><!-- TMPL_IF NAME="limit_desc" -->&nbsp;with 
limit(s):&nbsp;'<!-- TMPL_VAR NAME="limit_desc" -->'<!-- /TMPL_IF --></div>
 
 <div id="doc3" class="yui-t1">
    <div id="bd">
@@ -165,7 +165,7 @@ function yuiZ3950button() {
                 <!-- RESORT END -->
             </form>
             <h3>
-                <!-- TMPL_VAR NAME="total" --> result(s) found <!-- TMPL_IF 
NAME="query_desc" -->for <span style="font-weight: bold;">'<!-- TMPL_VAR 
NAME="query_desc" -->'</span><!-- /TMPL_IF --><!-- TMPL_IF NAME="limit_desc" 
-->&nbsp;with limit(s): <span style="font-weight: bold;">'<!-- TMPL_VAR 
NAME="limit_desc" -->'</span><!-- /TMPL_IF --><!-- TMPL_IF NAME="LibraryName" 
--> in <!-- TMPL_VAR NAME="LibraryName" --> Catalog<!-- /TMPL_IF -->.<br 
/>&nbsp;
+                <!-- TMPL_VAR NAME="total" --> result(s) found <!-- TMPL_IF 
NAME="query_desc" -->for <span style="font-weight: bold;">'<!-- TMPL_VAR 
NAME="query_desc" ESCAPE="HTML"-->'</span><!-- /TMPL_IF --><!-- TMPL_IF 
NAME="limit_desc" -->&nbsp;with limit(s): <span style="font-weight: 
bold;">'<!-- TMPL_VAR NAME="limit_desc" -->'</span><!-- /TMPL_IF --><!-- 
TMPL_IF NAME="LibraryName" --> in <!-- TMPL_VAR NAME="LibraryName" --> 
Catalog<!-- /TMPL_IF -->.<br />&nbsp;
             </h3>
             <div id="selection_ops" style="display:none">
                 <a href="#" onclick="selectAll(); return false;">Select All</a>
@@ -186,7 +186,7 @@ function yuiZ3950button() {
         <!-- TMPL_IF NAME="searchdesc" -->
             <h3>No results found</h3>
             <p>
-                No results match your search <!-- TMPL_IF NAME="query_desc" 
-->for <span style="font-weight: bold;">'<!-- TMPL_VAR NAME="query_desc" 
-->'</span><!-- /TMPL_IF --><!-- TMPL_IF NAME="limit_desc" -->&nbsp;with 
limit(s): <span style="font-weight: bold;">'<!-- TMPL_VAR NAME="limit_desc" 
-->'</span><!-- /TMPL_IF --><!-- TMPL_IF NAME="LibraryName" --> in <!-- 
TMPL_VAR NAME="LibraryName" --> Catalog<!-- /TMPL_IF -->.
+                No results match your search <!-- TMPL_IF NAME="query_desc" 
-->for <span style="font-weight: bold;">'<!-- TMPL_VAR NAME="query_desc" 
ESCAPE="HTML"-->'</span><!-- /TMPL_IF --><!-- TMPL_IF NAME="limit_desc" 
-->&nbsp;with limit(s): <span style="font-weight: bold;">'<!-- TMPL_VAR 
NAME="limit_desc" -->'</span><!-- /TMPL_IF --><!-- TMPL_IF NAME="LibraryName" 
--> in <!-- TMPL_VAR NAME="LibraryName" --> Catalog<!-- /TMPL_IF -->.
             </p>
         <!-- TMPL_ELSE -->
             <h3>No results found</h3>
-- 
1.5.6.3

_______________________________________________
Koha-patches mailing list
Koha-patches@lists.koha.org
http://lists.koha.org/mailman/listinfo/koha-patches