Revert bug 13618 - "Prevent XSS in the Staff Client and the OPAC" due to performance...
authorKyle M Hall <kyle@bywatersolutions.com>
Thu, 11 Feb 2016 01:26:46 +0000 (01:26 +0000)
committerBrendan Gallagher <brendan@bywatersolutions.com>
Thu, 11 Feb 2016 19:39:53 +0000 (19:39 +0000)
Revert "DBRev to make notes of the XSS patches and the new important dependency."

This reverts commit e140603a594576180b846cf9299bee4629442c84.

Revert "Bug 13618: Specific for branches.opac_info"

This reverts commit 06e4a50f00efc62bbeb54260350f6f402d2e5e98.

Revert "Bug 13618: (follow-up) Specific for other prefs"

This reverts commit d6475a111fb701df68862afc6b23a7bfc774787b.

Revert "Bug 13618: Fix for debarredcomment and patron messages"

This reverts commit dd98c9df92503885f4f88e4cb6ca4c555fb28ee8.

Revert "Bug 13618: Do not display html tags in patron's notices"

This reverts commit a065b243feaef07586779d7943e00bbda6023db3.

Revert "Bug 13618: Do not display &nbsp; and html tags in item fields content"

This reverts commit baeeaffbf894d6eb7d12666071d2d9b9ab66e874.

Revert "Bug 13618: Fix for system preference description"

This reverts commit a967a09261fb2eebf27cc4a2c523122432a37203.

Revert "Bug 13618: Remove html filters for newly pushed code"

This reverts commit 0e98662b10197b1d92f2fb8ad50206e598a571e6.

Revert "Bug 13618: (follow-up) add missing lines for opac-shelves"

This reverts commit fc2fb605e53d8c5774a952bcf620335fbf77c004.

Revert "Bug 13618: (follow-up) Specific for ColumnsSettings"

This reverts commit bc308fdd9c95b13810bac57a2da9514ff37f570d.

Revert "Bug 13618: Fix for edit biblios and items"

This reverts commit 811c4e8402593127074ad47a81098f3aad389c94.

Revert "Bug 13618: followup to remove tabs"

This reverts commit ca8e8c397c8c2392b85d4c3232309ded66f3b8f1.

Revert "Bug 13618: Fix last occurrences recently introduced to master"

This reverts commit bb417b256b319d8a99ea611b76bad80c4d47004c.

Revert "Bug 13618: Fix for news"

This reverts commit ae5b98020aeec7d56faa7170cbad3319a8245379.

Revert "Bug 13618: Fix escape on sending baskets or shelves by email"

This reverts commit a7731ffe25e89d900d57e07f8e3de7b398090980.

Revert "Bug 13618: Specific for XSLTBloc"

This reverts commit 11fa38dc29e16d94a5ed81eb9e29b84f7e166d6c.

Revert "Bug 13618: Specific for Salutation on editing a patron"

This reverts commit 36c07ad6d3cf57c31bad4b11370b53aafd4d4806.

Revert "Bug 13618: Specific for other prefs"

This reverts commit e6ea281a3bcd2c3550578e8f2dd188a7701c77fb.

Revert "Bug 13618 - memberentrygen.tt errors Not a GLOB reference"

This reverts commit 782487455770a59ab7b30b5e92a1a66c28d30b88.

Revert "Bug 13618: Specific for ColumnsSettings"

This reverts commit 1834da3da367321771530331e7420ffa94d52979.

Revert "Bug 13618: Specific for IntranetUser* and OPACUser* prefs"

This reverts commit 21ae62b25310ea0876b087b729cf0b3a2ad7b1e6.

Revert "Bug 13618: Fix error 'Not a GLOB reference'"

This reverts commit 602bdbab4c6f86aa136158e1459d800d9530e243.

Revert "Bug 13618: Specific for the ISBD view"

This reverts commit d254362435a9ada5dffa8b5ef1c2a19f5d525f5e.

Revert "Bug 13618: Specific for pagination_bar"

This reverts commit 8837a8ae68f8089777b824203f3878735ff96591.

Revert "Bug 13618: Specific places where we don't need to escape variables - intra"

This reverts commit 00eff140b3402a043e31915d1a7b29aec3605433.

Revert "Bug 13618: Remove html filters at the intranet"

This reverts commit 7db851ff03a168fa46d56bb0e472be249dbd5410.

Revert "Bug 13618: Specific places where we don't need to escape variables"

This reverts commit 49a3738b8d54580e80e92e74fdba0483008b5cfd.

Revert "Bug 13618: Remove html filters at the OPAC"

This reverts commit cedaa0e23e0927884f1c5ef2cafde4bcdd6d55ff.

Revert "Bug 13618: Use Template::Stash::AutoEscaping to use the html filter"

This reverts commit 01b38d3b13f09b927201cba5eb146b6597d4bfeb.

Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>

Signed-off-by: Brendan Gallagher brendan@bywatersolutions.com

213 files changed:
C4/Installer/PerlDependencies.pm
C4/Templates.pm
Koha.pm
installer/data/mysql/updatedatabase.pl
koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-search.inc
koha-tmpl/intranet-tmpl/prog/en/includes/auth-finder-search.inc
koha-tmpl/intranet-tmpl/prog/en/includes/authorities-search-results.inc
koha-tmpl/intranet-tmpl/prog/en/includes/authorities-search.inc
koha-tmpl/intranet-tmpl/prog/en/includes/authorities.inc
koha-tmpl/intranet-tmpl/prog/en/includes/borrower_debarments.inc
koha-tmpl/intranet-tmpl/prog/en/includes/catalogue/itemsearch_item.csv.inc
koha-tmpl/intranet-tmpl/prog/en/includes/catalogue/itemsearch_item.inc
koha-tmpl/intranet-tmpl/prog/en/includes/catalogue/itemsearch_item.json.inc
koha-tmpl/intranet-tmpl/prog/en/includes/circ-menu.inc
koha-tmpl/intranet-tmpl/prog/en/includes/doc-head-close.inc
koha-tmpl/intranet-tmpl/prog/en/includes/facets.inc
koha-tmpl/intranet-tmpl/prog/en/includes/header.inc
koha-tmpl/intranet-tmpl/prog/en/includes/merge-record.inc
koha-tmpl/intranet-tmpl/prog/en/includes/page-numbers.inc
koha-tmpl/intranet-tmpl/prog/en/includes/prefs-admin-search.inc
koha-tmpl/intranet-tmpl/prog/en/includes/slip-print.inc
koha-tmpl/intranet-tmpl/prog/en/modules/about.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/addorder.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/addorderiso2709.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basket.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/basketgroup.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/histsearch.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/invoice-files.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/invoice.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/lateorders.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/modordernotes.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/neworderbiblio.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/neworderempty.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/newordersubscription.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/newordersuggestion.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/orderreceive.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/parcel.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/tables/members_results.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/transferorder.tt
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/z3950_search.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/aqbudgetperiods.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/auth_subfields_structure.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/auth_tag_structure.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/authtypes.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/biblio_framework.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/branches.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/categories.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/cities.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/classsources.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/currency.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/itemtypes.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/marc_subfields_structure.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/marctagstructure.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/matching-rules.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/patron-attr-types.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/preferences.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/systempreferences.tt
koha-tmpl/intranet-tmpl/prog/en/modules/admin/z3950servers.tt
koha-tmpl/intranet-tmpl/prog/en/modules/auth.tt
koha-tmpl/intranet-tmpl/prog/en/modules/authorities/authorities.tt
koha-tmpl/intranet-tmpl/prog/en/modules/authorities/searchresultlist-auth.tt
koha-tmpl/intranet-tmpl/prog/en/modules/authorities/searchresultlist.tt
koha-tmpl/intranet-tmpl/prog/en/modules/basket/basket.tt
koha-tmpl/intranet-tmpl/prog/en/modules/basket/sendbasket.tt
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/ISBDdetail.tt
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/MARCdetail.tt
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/detail.tt
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/imageviewer.tt
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/issuehistory.tt
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/itemsearch.tt
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/moredetail.tt
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tt
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/search-history.tt
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/subject.tt
koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/addbiblio.tt
koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/addbooks.tt
koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/additem.tt
koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/linkitem.tt
koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/moveitem.tt
koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/macles.tt
koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/marc21_linking_section.tt
koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/unimarc_field_210c.tt
koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/unimarc_field_4XX.tt
koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/unimarc_field_686a.tt
koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/z3950_auth_search.tt
koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/z3950_search.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/bookcount.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchoverdues.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/branchtransfers.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation_batch_checkouts.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/on-site_checkouts.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/overdue.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/pendingreserves.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/printslip.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/renew.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/reserveratios.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/returns.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/selectbranchprinter.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/transfer-slip.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/transferstoreceive.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/view_holdsqueue.tt
koha-tmpl/intranet-tmpl/prog/en/modules/circ/waitingreserves.tt
koha-tmpl/intranet-tmpl/prog/en/modules/installer/auth.tt
koha-tmpl/intranet-tmpl/prog/en/modules/installer/step3.tt
koha-tmpl/intranet-tmpl/prog/en/modules/intranet-main.tt
koha-tmpl/intranet-tmpl/prog/en/modules/labels/label-edit-layout.tt
koha-tmpl/intranet-tmpl/prog/en/modules/labels/result.tt
koha-tmpl/intranet-tmpl/prog/en/modules/labels/spinelabel-print.tt
koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt
koha-tmpl/intranet-tmpl/prog/en/modules/members/member.tt
koha-tmpl/intranet-tmpl/prog/en/modules/members/memberentrygen.tt
koha-tmpl/intranet-tmpl/prog/en/modules/members/moremember-print.tt
koha-tmpl/intranet-tmpl/prog/en/modules/members/moremember-receipt.tt
koha-tmpl/intranet-tmpl/prog/en/modules/members/moremember.tt
koha-tmpl/intranet-tmpl/prog/en/modules/members/notices.tt
koha-tmpl/intranet-tmpl/prog/en/modules/members/purchase-suggestions.tt
koha-tmpl/intranet-tmpl/prog/en/modules/members/readingrec.tt
koha-tmpl/intranet-tmpl/prog/en/modules/members/tables/guarantor_search.tt
koha-tmpl/intranet-tmpl/prog/en/modules/members/tables/members_results.tt
koha-tmpl/intranet-tmpl/prog/en/modules/offline_circ/process_koc.tt
koha-tmpl/intranet-tmpl/prog/en/modules/patron_lists/lists.tt
koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/edit-layout.tt
koha-tmpl/intranet-tmpl/prog/en/modules/patroncards/tables/members_results.tt
koha-tmpl/intranet-tmpl/prog/en/modules/reports/guided_reports_start.tt
koha-tmpl/intranet-tmpl/prog/en/modules/reports/issues_stats.tt
koha-tmpl/intranet-tmpl/prog/en/modules/reports/itemslost.tt
koha-tmpl/intranet-tmpl/prog/en/modules/reports/reserves_stats.tt
koha-tmpl/intranet-tmpl/prog/en/modules/reports/serials_stats.tt
koha-tmpl/intranet-tmpl/prog/en/modules/reserve/request.tt
koha-tmpl/intranet-tmpl/prog/en/modules/reviews/reviewswaiting.tt
koha-tmpl/intranet-tmpl/prog/en/modules/rotating_collections/addItems.tt
koha-tmpl/intranet-tmpl/prog/en/modules/serials/add_fields.tt
koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt
koha-tmpl/intranet-tmpl/prog/en/modules/serials/claims.tt
koha-tmpl/intranet-tmpl/prog/en/modules/serials/result.tt
koha-tmpl/intranet-tmpl/prog/en/modules/serials/routing-preview-slip.tt
koha-tmpl/intranet-tmpl/prog/en/modules/serials/routing-preview.tt
koha-tmpl/intranet-tmpl/prog/en/modules/serials/routing.tt
koha-tmpl/intranet-tmpl/prog/en/modules/serials/serials-collection.tt
koha-tmpl/intranet-tmpl/prog/en/modules/serials/serials-edit.tt
koha-tmpl/intranet-tmpl/prog/en/modules/serials/serials-search.tt
koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-add.tt
koha-tmpl/intranet-tmpl/prog/en/modules/serials/subscription-bib-search.tt
koha-tmpl/intranet-tmpl/prog/en/modules/serials/tables/members_results.tt
koha-tmpl/intranet-tmpl/prog/en/modules/services/itemrecorddisplay.tt
koha-tmpl/intranet-tmpl/prog/en/modules/suggestion/suggestion.tt
koha-tmpl/intranet-tmpl/prog/en/modules/tags/list.tt
koha-tmpl/intranet-tmpl/prog/en/modules/tags/review.tt
koha-tmpl/intranet-tmpl/prog/en/modules/tools/batchMod-del.tt
koha-tmpl/intranet-tmpl/prog/en/modules/tools/batchMod-edit.tt
koha-tmpl/intranet-tmpl/prog/en/modules/tools/batch_delete_records.tt
koha-tmpl/intranet-tmpl/prog/en/modules/tools/inventory.tt
koha-tmpl/intranet-tmpl/prog/en/modules/tools/koha-news.tt
koha-tmpl/intranet-tmpl/prog/en/modules/tools/viewlog.tt
koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/addbybiblionumber.tt
koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/sendshelf.tt
koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/shelves.tt
koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/tables/shelves_results.tt
koha-tmpl/opac-tmpl/bootstrap/en/includes/authorities-search-results.inc
koha-tmpl/opac-tmpl/bootstrap/en/includes/bodytag.inc
koha-tmpl/opac-tmpl/bootstrap/en/includes/doc-head-close.inc
koha-tmpl/opac-tmpl/bootstrap/en/includes/masthead-sco.inc
koha-tmpl/opac-tmpl/bootstrap/en/includes/masthead.inc
koha-tmpl/opac-tmpl/bootstrap/en/includes/navigation.inc
koha-tmpl/opac-tmpl/bootstrap/en/includes/opac-authorities.inc
koha-tmpl/opac-tmpl/bootstrap/en/includes/opac-bottom.inc
koha-tmpl/opac-tmpl/bootstrap/en/includes/opac-detail-sidebar.inc
koha-tmpl/opac-tmpl/bootstrap/en/includes/opac-facets.inc
koha-tmpl/opac-tmpl/bootstrap/en/includes/page-numbers.inc
koha-tmpl/opac-tmpl/bootstrap/en/includes/shelfbrowser.inc
koha-tmpl/opac-tmpl/bootstrap/en/modules/maintenance.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-ISBDdetail.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-MARCdetail.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-addbybiblionumber.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-auth-MARCdetail.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-auth.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-authoritiessearchresultlist.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-basket.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-blocked.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-browser.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-detail.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-downloadcart.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-downloadshelf.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-imageviewer.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-main.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-mymessages.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-news-rss.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-opensearch.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-overdrive-search.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-readingrecord.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-registration-confirmation.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-reserve.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-restrictedpage.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-results-grouped.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-results.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-review.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-search-history.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-sendbasket.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-sendshelf.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-serial-issues.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves-rss.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-showreviews-rss.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-showreviews.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-suggestions.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-tags.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-tags_subject.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-topissues.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-user.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/sco/help.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/sco/sco-main.tt
koha-tmpl/opac-tmpl/bootstrap/en/modules/svc/suggestion.tt

index be84077..d621f33 100644 (file)
@@ -822,11 +822,6 @@ our $PERL_DEPS = {
         'required' => '0',
         'min_ver'  => '0.03',
     },
-    'Template::Stash::AutoEscaping' => {
-        'usage'    => 'Code',
-        'required' => '1',
-        'min_ver'  => '0.0303',
-    },
 };
 
 1;
index 0528217..4f23dc7 100644 (file)
@@ -5,7 +5,6 @@ use warnings;
 use Carp;
 use CGI qw ( -utf8 );
 use List::MoreUtils qw/ any uniq /;
-use Template::Stash::AutoEscaping;
 
 # Copyright 2009 Chris Cormack and The Koha Dev Team
 #
@@ -70,7 +69,6 @@ sub new {
             COMPILE_DIR => $use_template_cache ? C4::Context->config('template_cache_dir') : '',
             INCLUDE_PATH => \@includes,
             FILTERS => {},
-            STASH => Template::Stash::AutoEscaping->new,
             ENCODING => 'UTF-8',
         }
     ) or die Template->error();
diff --git a/Koha.pm b/Koha.pm
index 23ab78e..a71409d 100644 (file)
--- a/Koha.pm
+++ b/Koha.pm
@@ -29,7 +29,7 @@ use vars qw{ $VERSION };
 # - #4 : the developer version. The 4th number is the database subversion.
 #        used by developers when the database changes. updatedatabase take care of the changes itself
 #        and is automatically called by Auth.pm when needed.
-$VERSION = "3.23.00.018";
+$VERSION = "3.23.00.017";
 
 sub version {
     return $VERSION;
index a67727f..99046ac 100755 (executable)
@@ -11713,14 +11713,6 @@ remove_tree( $tmp ) if -d $tmp;
 
 }
 
-$DBversion = "3.23.00.018";
-if ( CheckVersion($DBversion) ) {
-
-    print "Upgrade to $DBversion done (Bug 13618 - Prevent XSS in the Staff Client and the OPAC --  Please note the new dependency Template::Stash::AutoEscaping - pretty important to have)\n";
-    SetVersion($DBversion);
-
-}
-
 # DEVELOPER PROCESS, search for anything to execute in the db_update directory
 # SEE bug 13068
 # if there is anything in the atomicupdate, read and execute it.
index 74d9d95..5aebf54 100644 (file)
@@ -12,7 +12,7 @@
        
                <form action="/cgi-bin/koha/acqui/histsearch.pl" method="post">
         <label for="title">Title: </label> <input type="text" id="title" name="title" size="15" value="[% title %]" />
-        <label for="searchsupplier">Vendor:</label> <input type="text" id="searchsupplier" name="name" size="15" value="[% name %]" />
+        <label for="searchsupplier">Vendor:</label> <input type="text" id="searchsupplier" name="name" size="15" value="[% name|html %]" />
         <input type="hidden" id="do_search" name="do_search" value="do" />
         <span class="filteraction" id="filteraction_off" style="display:none"> <a href="#" onclick="$('#filters,.filteraction').toggle();">[-]</a></span>
         <span class="filteraction" id="filteraction_on"> <a href="#" onclick="$('#filters,.filteraction').toggle();">[+]</a></span>
index 54c7c83..bb2d3a8 100644 (file)
@@ -142,7 +142,7 @@ function finderjumpfull(page)
                         <option value="is">is exactly</option>
                         [% END %]
                     </select>
-                    <input id="value_mainstr" style="width:400px;" type="text" name="value_mainstr" value="[% value_mainstr %]" />
+                    <input id="value_mainstr" style="width:400px;" type="text" name="value_mainstr" value="[% value_mainstr |html %]" />
                     <div id="yvaluecontainermainmainentry"></div>
                 </li>
 
@@ -168,7 +168,7 @@ function finderjumpfull(page)
                         <option value="is">is exactly</option>
                         [% END %]
                     </select>
-                    <input id="value_main" style="width:400px;" type="text" name="value_main" value="[% value_main %]" />
+                    <input id="value_main" style="width:400px;" type="text" name="value_main" value="[% value_main |html %]" />
                     <div id="yvaluecontainermainentry"></div>
                 </li>
                 <li>
@@ -193,7 +193,7 @@ function finderjumpfull(page)
                         <option value="is">is exactly</option>
                         [% END %]
                     </select>
-                    <input type="text" name="value_match" value="[% value_match %]" />
+                    <input type="text" name="value_match" value="[% value_match |html %]" />
                 </li>
                 <li>
                     <label for="marclistanywhere">Search entire record: </label>
@@ -217,7 +217,7 @@ function finderjumpfull(page)
                         <option value="is">is exactly</option>
                         [% END %]
                     </select>
-                    <input id="value_any" style="width:400px;" type="text" name="value_any" value="[% value_any %]" />
+                    <input id="value_any" style="width:400px;" type="text" name="value_any" value="[% value_any |html %]" />
                     <div id="yvaluecontainermarclist"></div>
                 </li>
         <li>
index 8cedd31..a009c7d 100644 (file)
     [% IF marcflavour == 'UNIMARC' %]
         [% SWITCH type %]
         [% CASE 'broader' %]
-            <span class="BT">BT: [% heading %]</span>
+            <span class="BT">BT: [% heading | html %]</span>
         [% CASE 'narrower' %]
-            <span class="NT">NT: [% heading %]</span>
+            <span class="NT">NT: [% heading | html %]</span>
         [% CASE 'seefrom' %]
-            <span class="UF">UF: [% heading %]</span>
+            <span class="UF">UF: [% heading | html %]</span>
         [% CASE 'seealso' %]
-            <span class="RT">RT: [% heading %]</span>
+            <span class="RT">RT: [% heading | html %]</span>
         [% END %]
     [% ELSE %]
         <span class="heading">
         [% IF ( linkType=='seealso' ) %]
             [% IF ( authid ) %]
-            <a href="[% authidurl | url %][% authid | url %]">[% heading %]</a>
+            <a href="[% authidurl | url %][% authid | url %]">[% heading | html %]</a>
             [% ELSE %]
-            <a href="[% searchurl | url %][% heading %]">[% heading %]</a>
+            <a href="[% searchurl | url %][% heading | html %]">[% heading | html %]</a>
             [% END %]
         [% ELSE %]
-            [% heading %]
+            [% heading | html %]
         [% END %]
         </span>
         [% UNLESS ( type=='seefrom' || type=='seealso' ) %]
@@ -42,7 +42,7 @@
             [% CASE 'broader' %](Broader heading)
             [% CASE 'narrower' %](Narrower heading)
             [% CASE 'parent' %](Immediate parent body)
-            [% CASE %][% IF type %]([% type %])
+            [% CASE %][% IF type %]([% type | html %])
             [% END %]
         [% END %]
         </span>
@@ -50,7 +50,7 @@
     [% END %]
 [% END %]
 [% BLOCK authresult %]
-    [% IF ( summary.label ) %][% summary.label %]:[% END %]
+    [% IF ( summary.label ) %][% summary.label | html %]:[% END %]
     [% IF summary.summary %]
       <div class="authority-summary">
         [% summary.summary %]
@@ -59,7 +59,7 @@
     [% UNLESS ( summary.summaryonly ) %]
         <div class="authorizedheading">
           [% FOREACH authorize IN summary.authorized %]
-            <span class="authorizedheading">[% authorize.heading %]</span>
+            <span class="authorizedheading">[% authorize.heading | html %]</span>
             [% UNLESS loop.last %] | [% END %]
           [% END %]
         </div>
@@ -67,7 +67,7 @@
           [% IF summary.notes %]
            <div class="authres_notes">
            [% FOREACH note IN summary.notes %]
-             <span>[% note.note %]</span>
+             <span>[% note.note | html %]</span>
            [% END %]
            </div>
           [% END %]
index 5516556..d410dcc 100644 (file)
@@ -53,7 +53,7 @@
             <option value="is">is exactly</option>
             [% END %]
         </select>
-        <input id="value_mainentry" type="text" name="value" value="[% value%]" class="head-searchbox" />
+        <input id="value_mainentry" type="text" name="value" value="[% value | html%]" class="head-searchbox" />
         <select name="orderby">
             [% IF ( orderby == 'HeadingAsc' ) %]
             <option value="HeadingAsc" selected="selected">Heading A-Z</option>
             <option value="is">is exactly</option>
             [% END %]
         </select>
-        <input id="value_mainentry" type="text" name="value" value="[% value %]" class="head-searchbox" />
+        <input id="value_mainentry" type="text" name="value" value="[% value | html%]" class="head-searchbox" />
         <select name="orderby">
             [% IF ( orderby == 'HeadingAsc' ) %]
             <option value="HeadingAsc" selected="selected">Heading A-Z</option>
             <option value="is">is exactly</option>
             [% END %]
         </select>
-        <input id="value_matchheading" type="text" name="value" value="[% value %]" class="head-searchbox" />
+        <input id="value_matchheading" type="text" name="value" value="[% value | html %]" class="head-searchbox" />
         <select name="orderby">
             [% IF ( orderby == 'HeadingAsc' ) %]
             <option value="HeadingAsc" selected="selected">Heading A-Z</option>
             <option value="is">is exactly</option>
             [% END %]
         </select>
-        <input id="value_anywhere" type="text" name="value" value="[% value %]" class="head-searchbox" />
+        <input id="value_anywhere" type="text" name="value" value="[% value | html %]" class="head-searchbox" />
         <select name="orderby">
             [% IF ( orderby == 'HeadingAsc' ) %]
             <option value="HeadingAsc" selected="selected">Heading A-Z</option>
index b7e80ed..9e173c9 100644 (file)
@@ -8,9 +8,9 @@
         [% FOREACH node IN tree %]
             <li id="hier[% node.authid %]" class="[% node.class %] authnode">
             [% IF ( node.current_value ) %]
-                <span class='currentauth'>[% node.value %]</span>
+                <span class='currentauth'>[% node.value | html %]</span>
             [% ELSE %]
-                <a href="detail.pl?authid=[% node.authid %]" title="Term">[% node.value %]</a>
+                <a href="detail.pl?authid=[% node.authid %]" title="Term">[% node.value | html %]</a>
             [% END %]
             [% IF ( node.children && node.children.size > 0 ) %]
                 [% PROCESS showtree tree = node.children %]
index ece447e..aea0889 100644 (file)
@@ -51,7 +51,7 @@
                                     Discharge
                             [% END %]
                         </td>
-                        <td>[% d.comment.raw %]</td>
+                        <td>[% d.comment %]</td>
                         <td>[% IF d.expiration %] [% d.expiration | $KohaDates %] [% ELSE %] <i>Indefinite</i> [% END %]</td>
                         [% IF CAN_user_borrowers && CAN_user_circulate_manage_restrictions %]
                             <td>
index ef66e98..82e014c 100644 (file)
@@ -2,4 +2,4 @@
 [%- USE Koha -%]
 [%- biblio = item.biblio -%]
 [%- biblioitem = item.biblioitem -%]
-"[% biblio.title %] [% IF ( Koha.Preference( 'marcflavour' ) == 'UNIMARC' && biblio.author ) %]by [% END %][% biblio.author %]", "[% (biblioitem.publicationyear || biblio.copyrightdate) %]", "[% biblioitem.publishercode %]", "[% biblioitem.collectiontitle %]", "[% item.barcode %]", "[% item.itemcallnumber %]", "[% Branches.GetName(item.homebranch) %]", "[% Branches.GetName(item.holdingbranch) %]", "[% item.location %]", "[% item.stocknumber %]", "[% item.status %]", "[% (item.issues || 0) %]"[% INCLUDE 'empty_line.inc' %]
+"[% biblio.title |html %] [% IF ( Koha.Preference( 'marcflavour' ) == 'UNIMARC' && biblio.author ) %]by [% END %][% biblio.author |html %]", "[% (biblioitem.publicationyear || biblio.copyrightdate) |html %]", "[% biblioitem.publishercode |html %]", "[% biblioitem.collectiontitle |html %]", "[% item.barcode |html %]", "[% item.itemcallnumber |html %]", "[% Branches.GetName(item.homebranch) |html %]", "[% Branches.GetName(item.holdingbranch) |html %]", "[% item.location |html %]", "[% item.stocknumber |html %]", "[% item.status |html %]", "[% (item.issues || 0) |html %]"[% INCLUDE 'empty_line.inc' %]
index 828fc7e..8f65913 100644 (file)
@@ -5,7 +5,7 @@
 <tr>
   <td>
     <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% biblio.biblionumber %]" title="Go to record detail page">[% biblio.title %]</a>
-    [% IF ( Koha.Preference( 'marcflavour' ) == 'UNIMARC' && biblio.author ) %] by[% END %] [% biblio.author %]
+    [% IF ( Koha.Preference( 'marcflavour' ) == 'UNIMARC' && biblio.author ) %] by[% END %] [% biblio.author |html %]
   </td>
   <td>[% biblioitem.publicationyear || biblio.copyrightdate %]</td>
   <td>[% biblioitem.publishercode %]</td>
index b72878f..4085b94 100644 (file)
@@ -4,21 +4,21 @@
 [%- biblioitem = item.biblioitem -%]
 [
   "[% FILTER escape_quotes = replace('"', '\"') ~%]
-    <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% biblio.biblionumber %]" title="Go to record detail page">[% biblio.title %]</a>[% IF ( Koha.Preference( 'marcflavour' ) == 'UNIMARC' && biblio.author ) %] by[% END %] [% biblio.author %]
+    <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% biblio.biblionumber %]" title="Go to record detail page">[% biblio.title |html %]</a>[% IF ( Koha.Preference( 'marcflavour' ) == 'UNIMARC' && biblio.author ) %] by[% END %] [% biblio.author |html %]
   [%~ END %]",
-  "[% (biblioitem.publicationyear || biblio.copyrightdate) %]",
-  "[% biblioitem.publishercode %]",
-  "[% biblioitem.collectiontitle %]",
+  "[% (biblioitem.publicationyear || biblio.copyrightdate) |html %]",
+  "[% biblioitem.publishercode |html %]",
+  "[% biblioitem.collectiontitle |html %]",
   "[% FILTER escape_quotes ~%]
-    <a href="/cgi-bin/koha/catalogue/moredetail.pl?biblionumber=[% biblio.biblionumber %]#item[% item.itemnumber %]" title="Go to item details">[% item.barcode %]</a>
+    <a href="/cgi-bin/koha/catalogue/moredetail.pl?biblionumber=[% biblio.biblionumber %]#item[% item.itemnumber %]" title="Go to item details">[% item.barcode |html %]</a>
   [%~ END %]",
-  "[% item.itemcallnumber %]",
-  "[% Branches.GetName(item.homebranch) %]",
-  "[% Branches.GetName(item.holdingbranch) %]",
-  "[% item.location %]",
-  "[% item.stocknumber %]",
-  "[% item.status %]",
-  "[% (item.issues || 0) %]",
+  "[% item.itemcallnumber |html %]",
+  "[% Branches.GetName(item.homebranch) |html %]",
+  "[% Branches.GetName(item.holdingbranch) |html %]",
+  "[% item.location |html %]",
+  "[% item.stocknumber |html %]",
+  "[% item.status |html %]",
+  "[% (item.issues || 0) |html %]",
   "[% FILTER escape_quotes ~%]
     <a href="/cgi-bin/koha/cataloguing/additem.pl?op=edititem&biblionumber=[% item.biblionumber %]&itemnumber=[% item.itemnumber %]">Edit</a>
   [%~ END %]"
index 7c52ce5..f545afa 100644 (file)
             <li id="patronbasics"><img src="[% interface %]/[% theme %]/img/patron-blank.png" alt="[% firstname %] [% surname %] ([% cardnumber %])" border="0" style="margin: .3em 0 .3em .3em; padding: .2em; border: 1px solid #CCCCCC;" /></li>
         [% END %]
     [% END %]
-    [% SWITCH Koha.Preference( 'AddressFormat' ) %]
-        [% CASE 'de' %]
-            [% INCLUDE 'member-display-address-style-de.inc' %]
-        [% CASE # us %]
-            [% INCLUDE 'member-display-address-style-us.inc' %]
+    [% IF Koha.Preference( 'AddressFormat' ) %]
+        [% INCLUDE "member-display-address-style-${ Koha.Preference( 'AddressFormat' ) }.inc" %]
+    [% ELSE %]
+        [% INCLUDE 'member-display-address-style-us.inc' %]
     [% END %]
 
     [% IF ( phone ) %]<li class="patronphone">
index be5433a..c31932a 100644 (file)
@@ -22,7 +22,7 @@
 [% IF ( login ) %]
     <link rel="stylesheet" type="text/css" href="[% themelang %]/css/login.css" />
 [% END %]
-[% IF ( IntranetUserCSS ) %]<style type="text/css">[% IntranetUserCSS.raw %]</style>[% END %]
+[% IF ( IntranetUserCSS ) %]<style type="text/css">[% IntranetUserCSS %]</style>[% END %]
 
 <!-- koha core js -->
 <script type="text/javascript" src="[% themelang %]/js/staff-global.js"></script>
@@ -31,7 +31,7 @@
 [% IF ( IntranetUserJS ) %]
     <script type="text/javascript">
     //<![CDATA[
-    [% IntranetUserJS.raw %]
+    [% IntranetUserJS %]
     //]]>
     </script>
 [% END %]
index edf26f1..3d0d15e 100644 (file)
@@ -3,7 +3,7 @@
 <div id="search-facets">
 <h4>Refine your search</h4>
 <ul>
-    <li id="availability_facet">Availability<ul><li>[% IF ( available ) %]<strong>Showing only available items</strong></li><li><a href="/cgi-bin/koha/catalogue/search.pl?[% query_cgi %][% limit_cgi_not_availablity %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by |url %][% END %]">Show all items</a>[% ELSE %]<a href="/cgi-bin/koha/catalogue/search.pl?[% query_cgi %][% limit_cgi %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by |url %][% END %]&amp;limit=available">Limit to currently available items</a>[% END %]</li></ul>
+    <li id="availability_facet">Availability<ul><li>[% IF ( available ) %]<strong>Showing only available items</strong></li><li><a href="/cgi-bin/koha/catalogue/search.pl?[% query_cgi |html %][% limit_cgi_not_availablity %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by |url %][% END %]">Show all items</a>[% ELSE %]<a href="/cgi-bin/koha/catalogue/search.pl?[% query_cgi |html %][% limit_cgi |html %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by |url %][% END %]&amp;limit=available">Limit to currently available items</a>[% END %]</li></ul>
        [% IF ( related ) %] <li>(related searches: [% FOREACH relate IN related %][% relate.related_search %][% END %])</li>[% END %]
        </li>
 
       [% IF facet.active %]
         [% SET local_url = url _ "&amp;nolimit=" _ facet.type_link_value _ ":" _ facet.facet_link_value %]
         <span class="facet-label">[% facet.facet_label_value %]</span>
-        [<a href="[% local_url %]" title="Remove facet [% facet.facet_link_value %]">x</a>]
+        [<a href="[% local_url %]" title="Remove facet [% facet.facet_link_value | html %]">x</a>]
       [% ELSE %]
         [% SET local_url = url _ "&amp;limit=" _ facet.type_link_value _ ":" _ facet.facet_link_value %]
-        <span class="facet-label"><a href="[% local_url %]" title="[% facet.facet_title_value %]">[% facet.facet_label_value %]</a></span>
+        <span class="facet-label"><a href="[% local_url %]" title="[% facet.facet_title_value |html %]">[% facet.facet_label_value %]</a></span>
         [% IF ( displayFacetCount ) %]
           <span class="facet-count"> ([% facet.facet_count %])</span>
         [% END %]
index 98fbe56..e71c99f 100644 (file)
@@ -8,7 +8,7 @@
             [% IF ( intranetbookbag ) %]
             <li><a href="#" id="cartmenulink">Cart<span id="basketcount"></span></a></li>
             [% END %]
-            [% IntranetNav.raw %]
+            [% IntranetNav %]
             <li class="dropdown">
                 <a href="#" class="dropdown-toggle" data-toggle="dropdown">More <b class="caret"></b></a>
                 <ul class="dropdown-menu">
index 2d77a2f..df79d8e 100644 (file)
@@ -31,7 +31,7 @@
                                         [% END %]
                                         <label for="rec_[% record.recordid %]_[% subfield.subkey %]"><span class="subfield">[% subfield.subtag %]</span> / [% subfield.value %]</label>
                                         <input type="hidden" name="tag_[% field.tag %]_code_[% subfield.subtag %]_[% field.key %]_[% subfield.subkey %]" value="[% subfield.subtag %]" />
-                                        <input type="hidden" name="tag_[% field.tag %]_subfield_[% subfield.subtag %]_[% subfield.key %]_[% subfield.subkey %]" value="[% subfield.value %]" />
+                                        <input type="hidden" name="tag_[% field.tag %]_subfield_[% subfield.subtag %]_[% subfield.key %]_[% subfield.subkey %]" value="[% subfield.value |html%]" />
                                     </li>
                                 [% END %]
                             </ul>
index 2ef952f..2992164 100644 (file)
@@ -1,7 +1,7 @@
 [% IF ( PAGE_NUMBERS ) %]<div class="pages">
     <!-- Row of numbers corresponding to search result pages -->
-        [% IF ( previous_page_offset.defined ) %]<a class="nav" href="/cgi-bin/koha/catalogue/search.pl?[% query_cgi %][% limit_cgi %]&amp;offset=[% previous_page_offset %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by |url %][% END %]">&lt;&lt; Previous</a>[% END %]
-    [% FOREACH PAGE_NUMBER IN PAGE_NUMBERS %][% IF ( PAGE_NUMBER.highlight ) %]<span class="current">[% PAGE_NUMBER.pg %]</span>[% ELSE %]        <a class="nav" href="/cgi-bin/koha/catalogue/search.pl?[% query_cgi %][% limit_cgi %]&amp;offset=[% PAGE_NUMBER.offset %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by |url %][% END %]">[% PAGE_NUMBER.pg %]</a>[% END %]
+        [% IF ( previous_page_offset.defined ) %]<a class="nav" href="/cgi-bin/koha/catalogue/search.pl?[% query_cgi |html %][% limit_cgi |html %]&amp;offset=[% previous_page_offset %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by |url %][% END %]">&lt;&lt; Previous</a>[% END %]
+    [% FOREACH PAGE_NUMBER IN PAGE_NUMBERS %][% IF ( PAGE_NUMBER.highlight ) %]<span class="current">[% PAGE_NUMBER.pg %]</span>[% ELSE %]        <a class="nav" href="/cgi-bin/koha/catalogue/search.pl?[% query_cgi |html %][% limit_cgi |html %]&amp;offset=[% PAGE_NUMBER.offset %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by |url %][% END %]">[% PAGE_NUMBER.pg %]</a>[% END %]
     [% END %]
-        [% IF ( next_page_offset ) %]<a class="nav" href="/cgi-bin/koha/catalogue/search.pl?[% query_cgi %][% limit_cgi %]&amp;offset=[% next_page_offset %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by |url %][% END %]">Next &gt;&gt;</a>[% END %]
+        [% IF ( next_page_offset ) %]<a class="nav" href="/cgi-bin/koha/catalogue/search.pl?[% query_cgi |html %][% limit_cgi |html %]&amp;offset=[% next_page_offset %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by |url %][% END %]">Next &gt;&gt;</a>[% END %]
 </div>[% END %]
index d11d395..34de2d4 100644 (file)
@@ -6,7 +6,7 @@
            <form action="/cgi-bin/koha/admin/preferences.pl">
         <input type="hidden" name="tab" value="[% last_tab %]" />
         <input type="hidden" name="op" value="search" />
-        <input class="head-searchbox" type="text" size="40" name="searchfield" value="[% searchfield %]" />
+        <input class="head-searchbox" type="text" size="40" name="searchfield" value="[% searchfield |html %]" />
         <input type="submit" class="submit" value="Search" />
     </form>
        </div>
index e17afd6..413f4bb 100644 (file)
@@ -1,10 +1,10 @@
 <script type="text/javascript">
 [% IF ( Koha.Preference('IntranetSlipPrinterJS') ) %]
-    [% Koha.Preference('IntranetSlipPrinterJS').raw %]
+    [% Koha.Preference('IntranetSlipPrinterJS') %]
 [% ELSE %]
     function printThenClose() {
         window.print();
         setTimeout('window.close()', 1);
     }
 [% END %]
-</script>
+</script>
\ No newline at end of file
index 2c0d0eb..7ca5b4a 100644 (file)
 
         <table>
             <caption>Server information</caption>
-            <tr><th scope="row">Koha version: </th><td>[% kohaVersion %]</td></tr>
-            <tr><th scope="row">OS version ('uname -a'): </th><td>[% osVersion %]</td></tr>
-            <tr><th scope="row">Perl interpreter: </th><td>[% perlPath %]</td></tr>
-            <tr><th scope="row">Perl version: </th><td>[% perlVersion %]</td></tr>
+            <tr><th scope="row">Koha version: </th><td>[% kohaVersion |html %]</td></tr>
+            <tr><th scope="row">OS version ('uname -a'): </th><td>[% osVersion |html %]</td></tr>
+            <tr><th scope="row">Perl interpreter: </th><td>[% perlPath |html %]</td></tr>
+            <tr><th scope="row">Perl version: </th><td>[% perlVersion |html %]</td></tr>
             <tr><th scope="row">Perl @INC: </th><td>
                 [% FOREACH perlIncPat IN perlIncPath %]
-                    [% perlIncPat.perlinc %] <br />
+                    [% perlIncPat.perlinc |html %] <br />
                 [% END %]
             </td></tr>
-            <tr><th scope="row">MySQL version: </th><td>[% mysqlVersion %]</td></tr>
-            <tr><th scope="row">Apache version: </th><td>[% apacheVersion %]</td></tr>
+            <tr><th scope="row">MySQL version: </th><td>[% mysqlVersion |html %]</td></tr>
+            <tr><th scope="row">Apache version: </th><td>[% apacheVersion |html %]</td></tr>
           [% IF (is_psgi) %]
-            <tr><th scope="row">PSGI: </th><td>[% psgi_server %]</td></tr>
+            <tr><th scope="row">PSGI: </th><td>[% psgi_server |html %]</td></tr>
           [% END %]
-            <tr><th scope="row">Zebra version: </th><td>[% zebraVersion %]</td></tr>
+            <tr><th scope="row">Zebra version: </th><td>[% zebraVersion |html %]</td></tr>
             [% IF (errZebraConnection == 10000) %]
             <tr><th scope="row"><b>Error</b> </th><td>Zebra server seems not to be available. Is it started?</td></tr>
             [% ELSIF (errZebraConnection) %]
             <tr class="[% loop.parity %]">
                 [% FOREACH ro IN tabl.row2 %]
                      <td>[% ro.date %]</td>
-                     <td>[% ro.desc %]</td>
+                     <td>[% ro.desc|html %]</td>
                 [% END %]
             </tr>
         [% END %]
index 909d78a..322e535 100644 (file)
@@ -15,7 +15,7 @@
         <form action="/cgi-bin/koha/acqui/addorder.pl" method="post">
           [% FOREACH var IN vars_loop %]
             [% FOREACH val IN var.values %]
-              <input type="hidden" name="[% var.name %]" value="[% val %]" />
+              <input type="hidden" name="[% var.name %]" value="[% val |html %]" />
             [% END %]
           [% END %]
           <input type="hidden" name="confirm_budget_exceeding" value="1" />
index 7a3e291..31822d9 100644 (file)
                                 [% FOREACH iteminformatio IN item.iteminformation %]<li style="[% iteminformatio.hidden %];">
                                     <div class="subfield_line" id="subfield[% iteminformatio.serialid %][% iteminformatio.countitems %][% iteminformatio.subfield %][% iteminformatio.random %]">
                                         [% IF (iteminformatio.mandatory) %]
-                                            <label class="required">[% iteminformatio.subfield %] - [% iteminformatio.marc_lib.raw %]</label>
+                                            <label class="required">[% iteminformatio.subfield %] - [% iteminformatio.marc_lib %]</label>
                                         [% ELSE %]
-                                            <label>[% iteminformatio.subfield %] - [% iteminformatio.marc_lib.raw %]</label>
+                                            <label>[% iteminformatio.subfield %] - [% iteminformatio.marc_lib %]</label>
                                         [% END %]
 
                                         [% IF ( iteminformatio.marc_value.type == 'select' ) %]
index 00f001b..3b3e1b1 100644 (file)
@@ -3,7 +3,7 @@
 [% USE AuthorisedValues %]
 
 [% INCLUDE 'doc-head-open.inc' %]
-<title>Koha &rsaquo; Acquisitions &rsaquo; [% UNLESS ( basketno ) %]New [% END %]Basket [% basketname %] ([% basketno %]) for [% name %]</title>
+<title>Koha &rsaquo; Acquisitions &rsaquo; [% UNLESS ( basketno ) %]New [% END %]Basket [% basketname|html %] ([% basketno %]) for [% name|html %]</title>
 <link rel="stylesheet" type="text/css" href="[% themelang %]/css/datatables.css" />
 [% INCLUDE 'doc-head-close.inc' %]
 [% INCLUDE 'datatables.inc' %]
 [% INCLUDE 'acquisitions-search.inc' %]
 
 
-<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/acqui/acqui-home.pl">Acquisitions</a> &rsaquo; <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% name %]</a> &rsaquo; [% UNLESS ( basketno ) %]New [% END %]Basket [% basketname %] ([% basketno %]) for [% name %]</div>
+<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/acqui/acqui-home.pl">Acquisitions</a> &rsaquo; <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% name|html %]</a> &rsaquo; [% UNLESS ( basketno ) %]New [% END %]Basket [% basketname|html %] ([% basketno %]) for [% name|html %]</div>
 
 <div id="doc3" class="yui-t2">
 
                     <p><strong>The following records could not be deleted:</strong></p>
                     <ul>
                     [% FOREACH cannotdelbiblio IN cannotdelbiblios %]
-                        <li><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% cannotdelbiblio.biblionumber %]">[% cannotdelbiblio.title %]</a> by [% cannotdelbiblio.author %]:
+                        <li><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% cannotdelbiblio.biblionumber %]">[% cannotdelbiblio.title |html %]</a> by [% cannotdelbiblio.author %]:
                             <ul>
                             [% IF (cannotdelbiblio.itemcount) %]<li>[% cannotdelbiblio.itemcount %] item(s) attached.</li>[% END %]
                             [% IF (cannotdelbiblio.subscriptions) %]<li>[% cannotdelbiblio.subscriptions %] subscription(s) attached.</li>[% END %]
             <META HTTP-EQUIV=Refresh CONTENT="0; url=booksellers.pl">
             [% END %]
         [% ELSE %]
-        <h1>[% UNLESS ( basketno ) %]New [% END %]Basket [% basketname %] ([% basketno %]) for <a href="supplier.pl?booksellerid=[% booksellerid %]">[% name %]</a></h1>
+        <h1>[% UNLESS ( basketno ) %]New [% END %]Basket [% basketname|html %] ([% basketno %]) for <a href="supplier.pl?booksellerid=[% booksellerid %]">[% name|html %]</a></h1>
         [% IF ( basketno ) %]
             <div id="acqui_basket_summary" class="yui-g">
                 <div class="rows">
                             <p>
                                 [% IF ( books_loo.order_received ) %] (rcvd)[% END %]
                                 [% IF books_loo.title %]
-                                    <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% books_loo.biblionumber %]">[% books_loo.title %]</a>[% IF books_loo.author %] by [% books_loo.author %][% END %]
+                                    <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% books_loo.biblionumber %]">[% books_loo.title |html %]</a>[% IF books_loo.author %] by [% books_loo.author %][% END %]
                                 [% ELSE %]
                                     <em>Deleted bibliographic record, can't find title</em><br />
                                 [% END %]
                                 [% END %]
                             </p>
                                 [% IF ( books_loo.order_internalnote ) %]
-                                    <p class="ordernote"><strong>Internal note: </strong>[% books_loo.order_internalnote %] [<a href="/cgi-bin/koha/acqui/modordernotes.pl?ordernumber=[% books_loo.ordernumber %]&type=internal">Change internal note</a>]</p>
+                                    <p class="ordernote"><strong>Internal note: </strong>[% books_loo.order_internalnote|html %] [<a href="/cgi-bin/koha/acqui/modordernotes.pl?ordernumber=[% books_loo.ordernumber %]&type=internal">Change internal note</a>]</p>
                                 [% ELSE %]
                                     [<a href="/cgi-bin/koha/acqui/modordernotes.pl?ordernumber=[% books_loo.ordernumber %]&type=internal">Add internal note</a>]
                                 [% END %]
                                 [% IF ( books_loo.order_vendornote ) %]
-                                    <p class="ordernote"><strong>Vendor note: </strong>[% books_loo.order_vendornote %] [<a href="/cgi-bin/koha/acqui/modordernotes.pl?ordernumber=[% books_loo.ordernumber %]&type=vendor">Change vendor note</a>]</p>
+                                    <p class="ordernote"><strong>Vendor note: </strong>[% books_loo.order_vendornote|html %] [<a href="/cgi-bin/koha/acqui/modordernotes.pl?ordernumber=[% books_loo.ordernumber %]&type=vendor">Change vendor note</a>]</p>
                                 [% ELSE %]
                                     [<a href="/cgi-bin/koha/acqui/modordernotes.pl?ordernumber=[% books_loo.ordernumber %]&type=vendor">Add vendor note</a>]
                                 [% END %]
                       <p>
                         [% IF ( order.order_received ) %] (rcvd)[% END %]
                         [% IF (order.title) %]
-                          [% order.title %][% IF order.author %] by [% order.author %][% END %]
+                          [% order.title |html %][% IF order.author %] by [% order.author %][% END %]
                         [% ELSE %]
                           <em>Deleted bibliographic record, can't find title</em>
                         [% END %]
         <div id="closebasket_needsconfirmation" class="dialog alert">
 
         <form action="/cgi-bin/koha/acqui/basket.pl" class="confirm">
-            <h1>Are you sure you want to close basket [% basketname %]?</h1>
+            <h1>Are you sure you want to close basket [% basketname|html %]?</h1>
             [% IF ( CAN_user_acquisition_group_manage ) %]
             <p>
             <label for="createbasketgroup">Attach this basket to a new basket group with the same name</label>
index 261edd3..0bdd830 100644 (file)
@@ -1,6 +1,6 @@
 [% USE Branches %]
 [% INCLUDE 'doc-head-open.inc' %]
-<title>Koha &rsaquo; Basket grouping for [% booksellername %]</title>
+<title>Koha &rsaquo; Basket grouping for [% booksellername |html %]</title>
 <link rel="stylesheet" type="text/css" href="[% themelang %]/css/datatables.css" />
 [% INCLUDE 'doc-head-close.inc' %]
 [% INCLUDE 'datatables.inc' %]
@@ -129,9 +129,9 @@ function submitForm(form) {
 
 <div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/acqui/acqui-home.pl">Acquisitions</a> &rsaquo;
 [% IF ( grouping ) %]
-    <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% booksellername %]</a> &rsaquo; <a href="/cgi-bin/koha/acqui/basketgroup.pl?booksellerid=[% booksellerid %]">Basket grouping</a> &rsaquo; Add basket group for [% booksellername %]</div>
+    <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% booksellername |html %]</a> &rsaquo; <a href="/cgi-bin/koha/acqui/basketgroup.pl?booksellerid=[% booksellerid %]">Basket grouping</a> &rsaquo; Add basket group for [% booksellername |html %]</div>
 [% ELSE %]
-    <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% booksellername %]</a> &rsaquo; Basket grouping</div>
+    <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% booksellername |html %]</a> &rsaquo; Basket grouping</div>
 [% END %]
 
 <div id="doc3" class="yui-t2">
@@ -149,11 +149,11 @@ function submitForm(form) {
                         <div class="btn-group"><a href="[% script_name %]?op=delete&amp;basketgroupid=[% basketgroupid %]&amp;booksellerid=[% booksellerid %]" class="btn btn-small" id="delbutton"><i class="fa fa-remove"></i> Delete basket group</a></div>
                     [% END %]
                     [% IF (name && closedbg) %]
-                        <h1>Basket group [% name %] ([% basketgroupid %]) for <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% booksellername %]</a></h1>
+                        <h1>Basket group [% name %] ([% basketgroupid %]) for <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% booksellername |html %]</a></h1>
                     [% ELSIF (name) %]
-                        <h1>Edit basket group [% name %] ([% basketgroupid %]) for <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% booksellername %]</a></h1>
+                        <h1>Edit basket group [% name %] ([% basketgroupid %]) for <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% booksellername |html %]</a></h1>
                     [% ELSE %]
-                        <h1>Add basket group for <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% booksellername %]</a></h1>
+                        <h1>Add basket group for <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% booksellername |html %]</a></h1>
                     [% END %]
                     <div id="basketgroupcolumns" class="yui-g">
                         [% UNLESS (closedbg) %]
@@ -303,7 +303,7 @@ function submitForm(form) {
                     <div id="toolbar" class="btn-toolbar">
                         <div class="btn-group"><a href="/cgi-bin/koha/acqui/basketgroup.pl?op=add&amp;booksellerid=[% booksellerid %]" class="btn btn-small" id="newbasketgroup"><i class="fa fa-plus"></i> New basket group</a></div>
                     </div>
-                    <h1>Basket grouping for <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% booksellername %]</a></h1>
+                    <h1>Basket grouping for <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% booksellername |html %]</a></h1>
                     <div id="basket_groups" class="toptabs">
                         <ul class="ui-tabs-nav">
                             [% UNLESS ( listclosed) %]<li class="ui-tabs-active"><a href="#opened">Open</a></li>
index e6f8752..988fd27 100644 (file)
@@ -13,7 +13,7 @@
 //<![CDATA[
 var MSG_REMOVE_PATRON = _("Remove");
  $(document).ready(function() {
-    var columns_settings = [% ColumnsSettings.GetColumns( 'acqui', 'histsearch', 'histsearcht', 'json' ).raw %];
+    var columns_settings = [% ColumnsSettings.GetColumns( 'acqui', 'histsearch', 'histsearcht', 'json' ) %];
     KohaTable("#histsearcht", {
         "aoColumnDefs": [
             { "sType": "anti-the", "aTargets" : [ "anti-the" ] },
@@ -202,7 +202,7 @@ var MSG_REMOVE_PATRON = _("Remove");
                         [% END %]
                     </td>
                     <td>
-                        <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% order.biblionumber %]">[% order.title %]</a>
+                        <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% order.biblionumber %]">[% order.title |html %]</a>
                         <br />[% order.author %] <br /> [% order.isbn %]
                     </td>
                     <td><a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% order.id %]">[% order.name %]</a></td>
index 9703efa..b2e26aa 100644 (file)
@@ -36,7 +36,7 @@
 <div id="bd">
   <div id="yui-main">
     <div class="yui-b">
-      <h2>Files for invoice: [% invoicenumber %]</h2>
+      <h2>Files for invoice: [% invoicenumber | html %]</h2>
       <p><b>Vendor: </b><a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% suppliername %]</a></p>
       <br />
       [% IF errors %]
@@ -62,9 +62,9 @@
               <tbody>
                 [% FOREACH f IN files %]
                   <tr>
-                      <td><a href="?invoiceid=[% invoiceid %]&amp;op=download&amp;view=1&amp;file_id=[% f.file_id %]">[% f.file_name %]</a></td>
-                      <td>[% f.file_type %]</td>
-                      <td>[% f.file_description %]</td>
+                      <td><a href="?invoiceid=[% invoiceid %]&amp;op=download&amp;view=1&amp;file_id=[% f.file_id %]">[% f.file_name | html %]</a></td>
+                      <td>[% f.file_type | html %]</td>
+                      <td>[% f.file_description | html %]</td>
                       <td class="title-string">
                         <span title="[% f.date_uploaded %]">[% f.date_uploaded | $KohaDates %]</span>
                       </td>
index 7cb26cc..3c0991e 100644 (file)
                 <tbody>
                 [% FOREACH f IN files %]
                     <tr>
-                         <td><a href="/cgi-bin/koha/acqui/invoice-files.pl?invoiceid=[% invoiceid %]&amp;op=download&amp;view=1&amp;file_id=[% f.file_id %]">[% f.file_name %]</a></td>
-                         <td>[% f.file_type %]</td>
-                         <td>[% f.file_description %]</td>
+                         <td><a href="/cgi-bin/koha/acqui/invoice-files.pl?invoiceid=[% invoiceid %]&amp;op=download&amp;view=1&amp;file_id=[% f.file_id %]">[% f.file_name | html %]</a></td>
+                         <td>[% f.file_type | html %]</td>
+                         <td>[% f.file_description | html %]</td>
                          <td class="title-string">
                            <span title="[% f.date_uploaded %]">[% f.date_uploaded | $KohaDates %]</span>
                          </td>
index 5df669b..f680401 100644 (file)
@@ -25,7 +25,7 @@ function check_uncheck() {
 
 $(document).ready(function() {
 
-    var columns_settings = [% ColumnsSettings.GetColumns( 'acqui', 'lateorders', 'late_orders', 'json' ).raw %];
+    var columns_settings = [% ColumnsSettings.GetColumns( 'acqui', 'lateorders', 'late_orders', 'json' ) %];
     late_orderst = KohaTable("#late_orders", {
         "aoColumnDefs": [
             { "aTargets": [ 0 ], "bSortable": false, "bSearchable": false },
@@ -98,7 +98,7 @@ $(document).ready(function() {
 [% IF ( lateorders ) %]
 <form action="lateorders.pl" name="claim" method="post">
   <input type="hidden" name="op" value="send_alert" />
-  <input type="hidden" name="delay" value="[% delay%]" />
+  <input type="hidden" name="delay" value="[% delay | html%]" />
   <input type="hidden" name="booksellerid" value="[% booksellerid %]" />
        [% IF ( letters ) %]
        <p><label for="letter_code">Claim using notice: </label><select name="letter_code" id="letter_code">
@@ -151,7 +151,7 @@ $(document).ready(function() {
                 ([% lateorder.supplierid %])
             </td>
             <td>
-                <b>[% lateorder.title %]</b>
+                <b>[% lateorder.title |html %]</b>
                    [% IF ( lateorder.author ) %]<br/><i>Author:</i> [% lateorder.author %][% END %]
                    [% IF ( lateorder.publisher ) %]
                         <br/><i>Published by:</i> [% lateorder.publisher %]
@@ -222,10 +222,10 @@ $(document).ready(function() {
 <fieldset class="brief">
 <h4>Filter results:</h4>
 [% FOREACH ERROR_LOO IN ERROR_LOOP %]
-[% IF ( ERROR_LOO.delay_digits ) %]<p class="error">The number of days ([% ERROR_LOO.bad_delay %]) must be a number between 0 and 999.</p>[% END %]
+[% IF ( ERROR_LOO.delay_digits ) %]<p class="error">The number of days ([% ERROR_LOO.bad_delay | html %]) must be a number between 0 and 999.</p>[% END %]
 [% END %]
 <ol>
-    <li><label for="delay">Order date:</label><input size="3" maxlength="3" id="delay" type="text" name="delay" value="[% delay%]" /> days ago</li>
+    <li><label for="delay">Order date:</label><input size="3" maxlength="3" id="delay" type="text" name="delay" value="[% delay | html%]" /> days ago</li>
     <li><label for="from">Estimated delivery date from: </label>
         <input type="text" size="10" id="from" name="estimateddeliverydatefrom" value="[% estimateddeliverydatefrom %]" class="datepickerfrom" />
         <div class="hint">[% INCLUDE 'date-format.inc' %]</div>
index 081e013..f17d5c2 100644 (file)
@@ -12,7 +12,7 @@
 <body id="acq_modordernotes" class="acq">
 [% INCLUDE 'header.inc' %]
 
-<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/acqui/acqui-home.pl">Acquisition</a> &rsaquo; <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% booksellername %]</a> &rsaquo; <a href="/cgi-bin/koha/acqui/basket.pl?basketno=[% basketno %]">Basket [% basketname %] ([% basketno %])</a> &rsaquo; Change order [% IF (type == "vendor") %]vendor[% ELSE %]internal[% END %] note</div>
+<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/acqui/acqui-home.pl">Acquisition</a> &rsaquo; <a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% booksellerid %]">[% booksellername|html %]</a> &rsaquo; <a href="/cgi-bin/koha/acqui/basket.pl?basketno=[% basketno %]">Basket [% basketname|html %] ([% basketno %])</a> &rsaquo; Change order [% IF (type == "vendor") %]vendor[% ELSE %]internal[% END %] note</div>
 
 <div id="doc" class="yui-t7">
 
index 712f289..037dc10 100644 (file)
@@ -46,7 +46,7 @@
 
 [% IF ( total ) %]
 <b>[% total %] results found </b> 
-<div class="pages">[% pagination_bar.raw %]</div>
+<div class="pages">[% pagination_bar %]</div>
 [% ELSE %]
 <h3> No results found</h3>
 <p>
@@ -74,7 +74,7 @@
       [% FOREACH biblio IN resultsloop %]
         <tr>
             <td>
-                <p><span class="title">[% biblio.title %]</span>
+                <p><span class="title">[% biblio.title |html %]</span>
                 [% IF ( biblio.author ) %]  by <span class="author">[% biblio.author %]</span>,[% END %]</p>
                 <p>[% IF ( biblio.isbn ) %] [% biblio.isbn %][% END %]
                 [% IF ( biblio.pages ) %] - [% biblio.pages %][% END %]
index 45855ea..7638f02 100644 (file)
@@ -309,10 +309,10 @@ $(document).ready(function()
         <ol><li>
             [% IF ( biblionumber ) %]
             <span class="label">Title</span>
-                <input type="hidden" name="title" value="[% title %]" /> <span class="title">[% title %]</span>
+                <input type="hidden" name="title" value="[% title |html %]" /> <span class="title">[% title |html %]</span>
             [% ELSE %]
             <label for="entertitle" class="required">Title: </label>
-                <input type="text" id="entertitle" size="50" name="title" value="[% title %]" class="focus" />
+                <input type="text" id="entertitle" size="50" name="title" value="[% title |html %]" class="focus" />
                 <span class="required">Required</span>
             [% END %]
         </li>
index 1ae94c6..d6e65a0 100644 (file)
@@ -70,7 +70,7 @@
                         [% FOREACH sub IN subs_loop %]
                             <tr data-reneweddate="[% sub.reneweddate %]" >
                                 <td>[% sub.issn %]</td>
-                                <td><a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% sub.subscriptionid %]" class="button" title="subscription detail">[% IF (sub.title) %][% sub.title %][% ELSE %]
+                                <td><a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% sub.subscriptionid %]" class="button" title="subscription detail">[% IF (sub.title) %][% sub.title |html %][% ELSE %]
                                 ---
                             [% END %][% IF (sub.unititle) %], [% sub.unititle %][% END %]</a>
                                 </td>
index a85e52f..11ab144 100644 (file)
@@ -53,7 +53,7 @@
             <tr>
                 <td>[% suggestions_loo.managedby %]</td>
                 <td>
-                    <p>[% suggestions_loo.title %] - [% suggestions_loo.author %]</p>
+                    <p>[% suggestions_loo.title |html %] - [% suggestions_loo.author %]</p>
                     <p>
                         [% IF ( suggestions_loo.copyrightdate ) %]&copy; [% suggestions_loo.copyrightdate %] [% END %]
                         [% IF ( suggestions_loo.volumedesc ) %]volume: <i>[% suggestions_loo.volumedesc %]</i> [% END %]
index 26da5fc..31b08c5 100644 (file)
 
     <fieldset class="rows">
     <legend>Catalog details</legend>
-    <ol><li><span class="label">Title: </span><span class="title">[% title %]</span></li>
+    <ol><li><span class="label">Title: </span><span class="title">[% title |html %]</span></li>
     <li> <span class="label">Author: </span>
         [% author %]</li>
     <li><span class="label">Copyright: </span>
index 1d942d5..05de288 100644 (file)
                 </td>
                 <td class="orderfilterclass"><a href="neworderempty.pl?ordernumber=[% loop_order.ordernumber %]&amp;booksellerid=[% loop_order.booksellerid %]">[% loop_order.ordernumber %]</a></td>
                 <td class="summaryfilterclass">
-                  <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% loop_order.biblionumber %]">[% loop_order.title %]</a>
+                  <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% loop_order.biblionumber %]">[% loop_order.title |html %]</a>
                 [% IF ( loop_order.author ) %] by [% loop_order.author %][% END %]
                 [% IF ( loop_order.isbn ) %] &ndash; [% loop_order.isbn %][% END %]
                 [% IF ( loop_order.publishercode ) %]<br />Publisher:[% loop_order.publishercode %][% END %]
                 [% END %]
                 <br />
                 [% IF ( loop_order.order_internalnote ) %]
-                    <p class="ordernote"><strong>Internal note: </strong>[% loop_order.order_internalnote %] [<a href="/cgi-bin/koha/acqui/modordernotes.pl?ordernumber=[% loop_order.ordernumber %]&amp;referrer=/cgi-bin/koha/acqui/parcel.pl%3Finvoiceid=[% invoiceid %]&type=internal">Change internal note</a>]</p>
+                    <p class="ordernote"><strong>Internal note: </strong>[% loop_order.order_internalnote|html %] [<a href="/cgi-bin/koha/acqui/modordernotes.pl?ordernumber=[% loop_order.ordernumber %]&amp;referrer=/cgi-bin/koha/acqui/parcel.pl%3Finvoiceid=[% invoiceid %]&type=internal">Change internal note</a>]</p>
                 [% ELSE %]
                     [<a href="/cgi-bin/koha/acqui/modordernotes.pl?ordernumber=[% loop_order.ordernumber %]&amp;referrer=/cgi-bin/koha/acqui/parcel.pl%3Finvoiceid=[% invoiceid %]&type=internal">Add internal note</a>]
                 [% END %]
                 [% IF ( loop_order.order_vendornote ) %]
-                    <p class="ordernote"><strong>Vendor note: </strong>[% loop_order.order_vendornote %]</p>
+                    <p class="ordernote"><strong>Vendor note: </strong>[% loop_order.order_vendornote|html %]</p>
                 [% ELSE %]
                     [<a href="/cgi-bin/koha/acqui/modordernotes.pl?ordernumber=[% loop_order.ordernumber %]&amp;referrer=/cgi-bin/koha/acqui/parcel.pl%3Finvoiceid=[% invoiceid %]&type=vendor">Add vendor note</a>]
                 [% END %]
                     0
                   [% END %]
                 </td>
-                <td><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% order.biblionumber %]">[% order.title %]</a>
+                <td><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% order.biblionumber %]">[% order.title |html %]</a>
                 [% IF ( order.author ) %] / [% order.author %][% END %]
                 [% IF ( order.isbn ) %] - [% order.isbn %][% END %]
                 [% IF ( order.publishercode ) %]<br />Publisher :[% order.publishercode %][% END %]
index ea2660c..681f1cd 100644 (file)
                 "dt_name":
                     "<span style='white-space:nowrap'><a href='/cgi-bin/koha/members/moremember.pl?borrowernumber=[% data.borrowernumber %]'>[% INCLUDE 'patron-title.inc' borrowernumber = data.borrowernumber category_type = data.category_type firstname = data.firstname surname = data.surname othernames = data.othernames cardnumber = data.cardnumber invert_name = 1%]</a></span>",
                 "dt_branch":
-                    "[% data.branchname %]",
+                    "[% data.branchname |html %]",
                 "dt_category":
-                    "[% data.category_description %] ([% data.category_type %])",
+                    "[% data.category_description |html %] ([% data.category_type |html %])",
                 "dt_action":
                     [%- IF selection_type == 'select' -%]
-                        "<a href=\"#\" style='cursor:pointer' onclick='select_user(\"[% data.borrowernumber %]\", [% To.json(data) %] );'>Select</a>"
+                        "<a href=\"#\" style='cursor:pointer' onclick='select_user(\"[% data.borrowernumber %]\", [% To.json(data) | html %] );'>Select</a>"
                     [%- ELSE -%]
                         "<a href=\"#\" style='cursor:pointer' onclick='add_user(\"[% data.borrowernumber %]\", \"[% data.firstname %] [% data.surname %]\");'>Select</a>"
                     [%- END -%]
index 00b106f..68e76e4 100644 (file)
@@ -95,7 +95,7 @@
                       <tr>
                         <td><a href="neworderempty.pl?ordernumber=[% ordersloo.ordernumber %]">[% ordersloo.ordernumber %]</a></td>
                         <td>
-                            <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% ordersloo.biblionumber %]">[% ordersloo.title %]</a>
+                            <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% ordersloo.biblionumber %]">[% ordersloo.title |html %]</a>
                             [% IF ( ordersloo.author ) %] by [% ordersloo.author %][% END %]
                             [% IF ( ordersloo.isbn ) %] &ndash; [% ordersloo.isbn %][% END %]
                             [% IF ( ordersloo.publishercode ) %]<br />Publisher :[% ordersloo.publishercode %][% END %]
index a585972..6e1ad43 100644 (file)
@@ -108,7 +108,7 @@ tr.selected { background-color : #FFFFCC; } tr.selected td { background-color :
     <div class="yui-u first">
            <fieldset class="rows">
          <ol>
-             <li><label for="searchtitle">Title: </label> <input type="text" id="searchtitle"  name="title" value="[% title %]" class="focus" /></li>
+             <li><label for="searchtitle">Title: </label> <input type="text" id="searchtitle"  name="title" value="[% title |html %]" class="focus" /></li>
              <li><label for="isbn">ISBN: </label> <input type="text" id="isbn" name="isbn" value="[% isbn %]" /></li>
              <li><label for="lccall">LC call number: </label> <input type="text" id="lccall" name="lccall" value="" /></li>
              <li><label for="controlnumber">Control no.: </label> <input type="text" id="controlnumber" name="controlnumber" value="" /></li>
@@ -187,7 +187,7 @@ tr.selected { background-color : #FFFFCC; } tr.selected td { background-color :
 
         <tr>
             <td>[% breeding_loo.server %] <div class="linktools"><a href="/cgi-bin/koha/catalogue/showmarc.pl?importid=[% breeding_loo.breedingid %]" class="previewData">Preview MARC</a> <a href="/cgi-bin/koha/catalogue/showmarc.pl?viewas=card&amp;importid=[% breeding_loo.breedingid %]" class="previewData">Preview card</a> <a href="/cgi-bin/koha/acqui/neworderempty.pl?frameworkcode=[% frameworkcode %]&amp;breedingid=[% breeding_loo.breedingid %]&amp;booksellerid=[% booksellerid %]&amp;basketno=[% basketno %]">Order</a> <a href="#" id="closemenu" title="Close this menu"> X </a></div></td>
-            <td>[% breeding_loo.title %]</td>
+            <td>[% breeding_loo.title |html %]</td>
             <td>[% breeding_loo.author %]</td>
             <td>[% breeding_loo.isbn %]</td>
             <td>[% breeding_loo.lccn %]</td>
@@ -216,7 +216,7 @@ tr.selected { background-color : #FFFFCC; } tr.selected td { background-color :
     <form method="post" action="z3950_search.pl" id="page_form" name="page_form" class="checkboxed">
         <input type="hidden" name="op" id="op" value="do_search" />
         <input type="hidden" name="current_page" id="current_page" value="[% current_page %]" />
-        <input type="hidden" id="searchtitle"  name="title" value="[% title %]" />
+        <input type="hidden" id="searchtitle"  name="title" value="[% title |html %]" />
         <input type="hidden" id="isbn" name="isbn" value="[% isbn %]" />
         <input type="hidden" id="lccall" name="lccall" value="[% lccall %]" />
         <input type="hidden" id="author" name="author" value="[% author %]" />
index cd0888c..f9ab209 100644 (file)
@@ -8,7 +8,7 @@
         </a>
         <ul class="dropdown-menu pull-right" role="menu" aria-labelledby="budgetmenu_[% block_budget_id %]">
               <li>
-                  <a href="[% script_name %]?op=add_form&amp;budget_period_id=[% block_budget_id %]"><i class="fa fa-pencil"></i> Edit</a>
+                  <a href="[% script_name %]?op=add_form&amp;budget_period_id=[% block_budget_id |html %]"><i class="fa fa-pencil"></i> Edit</a>
               </li>
               <li>
                   <a href="[% script_name %]?op=delete_confirm&amp;budget_period_id=[% block_budget_id %]"><i class="fa fa-remove"></i> Delete</a>
       [% ELSE %]
         No active budgets
       [% END %]
-      <div class="paginationBar">[% active_pagination_bar.raw %]</div>
+      <div class="paginationBar">[% active_pagination_bar %]</div>
     </div>
     <div id="inactive">
       [% IF ( period_inactive_loop ) %]
       [% ELSE %]
         No inactive budgets
       [% END %]
-      <div class="pages">[% inactive_pagination_bar.raw %]</div>
+      <div class="pages">[% inactive_pagination_bar %]</div>
     </div>
   </div>
 [% END %]
index 58b78d7..e2cae0e 100644 (file)
@@ -27,11 +27,11 @@ function displayMoreConstraint(numlayer){
 [% INCLUDE 'cat-search.inc' %]
 <div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/admin/admin-home.pl">Administration</a> &rsaquo;
   <a href="/cgi-bin/koha/admin/authtypes.pl">Authority types</a> &rsaquo;
-  [% IF ( authtypecode ) %]<a href="/cgi-bin/koha/admin/auth_tag_structure.pl?authtypecode=[% authtypecode | uri%]">[% authtypecode%] framework</a> &rsaquo;
+  [% IF ( authtypecode ) %]<a href="/cgi-bin/koha/admin/auth_tag_structure.pl?authtypecode=[% authtypecode | uri%]">[% authtypecode |html%] framework</a> &rsaquo;
   [% ELSE %]<a href="/cgi-bin/koha/admin/auth_tag_structure.pl">Default framework</a> &rsaquo;
   [% END %]
-  [% IF ( else ) %]Authority MARC subfield structure for [% tagfield %]
-  [% ELSE %]<a href="/cgi-bin/koha/admin/auth_subfields_structure.pl?tagfield=[% tagfield | uri %]&amp;tagsubfield=[% tagsubfield %]&amp;authtypecode=[% authtypecode |uri %]">Authority MARC subfield structure for [% tagfield %]</a> &rsaquo;
+  [% IF ( else ) %]Authority MARC subfield structure for [% tagfield | html %]
+  [% ELSE %]<a href="/cgi-bin/koha/admin/auth_subfields_structure.pl?tagfield=[% tagfield | uri %]&amp;tagsubfield=[% tagsubfield %]&amp;authtypecode=[% authtypecode |uri %]">Authority MARC subfield structure for [% tagfield | html %]</a> &rsaquo;
   [% END %]
   [% IF ( delete_confirm ) %]Confirm deletion of subfield [% tagsubfield %]?[% END %]
   [% IF ( delete_confirmed ) %]Data deleted[% END %]
@@ -51,12 +51,12 @@ function displayMoreConstraint(numlayer){
 [% IF ( add_form ) %]
 
     <h1>[% IF ( use_heading_flags_p ) %]
-    [% IF ( heading_edit_subfields_p ) %]Edit MARC subfields constraints for field [% tagfield %] authority [% authtypecode%][% END %]
+    [% IF ( heading_edit_subfields_p ) %]Edit MARC subfields constraints for field [% tagfield | html %] authority [% authtypecode |html%][% END %]
     [% ELSE %][% action %][% END %]</h1>
     <form action="[% script_name %]" name="Aform" method="post">
         <input type="hidden" name="op" value="add_validate" />
-        <input type="hidden" name="tagfield" value="[% tagfield %]" />
-        <input type="hidden" name="authtypecode" value="[% authtypecode%]" />
+        <input type="hidden" name="tagfield" value="[% tagfield | html %]" />
+        <input type="hidden" name="authtypecode" value="[% authtypecode | html%]" />
         <fieldset class="action"><input type="submit" class="submit" value="Save changes" /> <a class="cancel" href="/cgi-bin/koha/admin/auth_subfields_structure.pl?tagfield=[% tagfield | uri %]&amp;authtypecode=[% authtypecode |uri %]">Cancel</a></fieldset>
         <div id="subfieldtabs" class="toptabs numbered">
             <ul>
@@ -222,16 +222,16 @@ function displayMoreConstraint(numlayer){
     <table><tr><th scope="row">Subfield:</th> <td>[% tagsubfield %]</td></tr>
     <tr><th scope="row">Description:</th> <td>[% liblibrarian %]</td></tr></table>
         <input type="hidden" name="searchfield" value="[% searchfield %]" />
-        <input type="hidden" name="tagfield" value="[% tagfield%]" />
+        <input type="hidden" name="tagfield" value="[% tagfield | html%]" />
         <input type="hidden" name="tagsubfield" value="[% tagsubfield %]" />
-        <input type="hidden" name="authtypecode" value="[% authtypecode%]" />
+        <input type="hidden" name="authtypecode" value="[% authtypecode | html%]" />
         <input type="submit" class="approve" value="Yes, delete this subfield" />
         </form>
         <form action="[% delete_link %]" method="get">
          <input type="hidden" name="searchfield" value="[% searchfield %]" />
-        <input type="hidden" name="tagfield" value="[% tagfield %]" />
+        <input type="hidden" name="tagfield" value="[% tagfield | html %]" />
         <input type="hidden" name="tagsubfield" value="[% tagsubfield %]" />
-        <input type="hidden" name="authtypecode" value="[% authtypecode%]" />
+        <input type="hidden" name="authtypecode" value="[% authtypecode |html%]" />
         <input type="submit" class="deny" value="No, do not delete" />
         </form>
     </form></div>
@@ -241,14 +241,14 @@ function displayMoreConstraint(numlayer){
 
    <div class="dialog message"> <h3>Data deleted</h3>
     <form action="[% script_name %]" method="post">
-        <input type="hidden" name="tagfield" value="[% tagfield %]" />
+        <input type="hidden" name="tagfield" value="[% tagfield | html %]" />
         <input type="submit" class="approve" value="OK" />
     </form></div>
 [% END %]
 
 
 [% IF ( else ) %]
-<h1>Authority MARC subfield structure admin for [% tagfield %] (authority: [% authtypecode %])</h1>
+<h1>Authority MARC subfield structure admin for [% tagfield | html %] (authority: [% authtypecode | html%])</h1>
 <p>This screen shows the subfields associated with the selected tag. You can edit subfields or add a new one by clicking on edit.</p>
 <p>The column 'Koha field' shows that the subfield is linked with a Koha field.</p>
 
index 932511b..2d9da9a 100644 (file)
@@ -96,8 +96,8 @@
                     </li>
                 [% END %]
 
-        <li><label for="liblibrarian">Text for librarians: </label><input type="text" name="liblibrarian" id="liblibrarian" value="[% liblibrarian %]" size="40" maxlength="100" /></li>
-        <li><label for="libopac">Text for opac: </label><input type="text" name="libopac" id="libopac" value="[% libopac %]" size="40" maxlength="100" /></li>
+        <li><label for="liblibrarian">Text for librarians: </label><input type="text" name="liblibrarian" id="liblibrarian" value="[% liblibrarian |html %]" size="40" maxlength="100" /></li>
+        <li><label for="libopac">Text for opac: </label><input type="text" name="libopac" id="libopac" value="[% libopac |html %]" size="40" maxlength="100" /></li>
         <li><label for="repeatable">Repeatable: </label>
             [% IF ( repeatable ) %]
                 <input type="checkbox" name="repeatable" id="repeatable" value="1" checked="checked" />
index d28b871..5a82fbf 100644 (file)
@@ -91,7 +91,7 @@
                 </li>
                 <li>
                     <label for="authtypetext" class="required">Description: </label>
-                    <input type="text" id="authtypetext" name="authtypetext" size="40" maxlength="80" value="[% authority_type.authtypetext %]" class="required" required="required" />
+                    <input type="text" id="authtypetext" name="authtypetext" size="40" maxlength="80" value="[% authority_type.authtypetext |html %]" class="required" required="required" />
                     <span class="required">Required</span>
                 </li>
                 <li>
                 <td>[% authority_type.summary %]</td>
                 <td>[% authority_type.auth_tag_to_report %]</td>
                 <td><a href="auth_tag_structure.pl?authtypecode=[% authority_type.authtypecode %]" class="button parameters" >MARC structure</a></td>
-                <td><a href="/cgi-bin/koha/admin/authtypes.pl?op=add_form&amp;authtypecode=[% authority_type.authtypecode %]">Edit</a></td>
-                <td><a href="/cgi-bin/koha/admin/authtypes.pl?op=delete_confirm&amp;authtypecode=[% authority_type.authtypecode %]">Delete</a></td>
+                <td><a href="/cgi-bin/koha/admin/authtypes.pl?op=add_form&amp;authtypecode=[% authority_type.authtypecode |html %]">Edit</a></td>
+                <td><a href="/cgi-bin/koha/admin/authtypes.pl?op=delete_confirm&amp;authtypecode=[% authority_type.authtypecode |html %]">Delete</a></td>
             </tr>
         [% END %]
         <tbody>
index da7c4e7..52ce915 100644 (file)
                 [% END %]
                 <li>
                     <label for="description" class="required">Description: </label>
-                    <input type="text" name="frameworktext" id="description" size="40" maxlength="80" value="[% framework.frameworktext %]" required="required" class="required" />
+                    <input type="text" name="frameworktext" id="description" size="40" maxlength="80" value="[% framework.frameworktext |html %]" required="required" class="required" />
                     <span class="required">Required</span>
                 </li>
             </ol>
             <td>[% loo.frameworkcode %]</td>
             <td>[% loo.frameworktext %]</td>
             <td><a href="marctagstructure.pl?frameworkcode=[% loo.frameworkcode %]" >MARC structure</a></td>
-            <td><a href="/cgi-bin/koha/admin/biblio_framework.pl?op=add_form&amp;frameworkcode=[% loo.frameworkcode %]">Edit</a></td>
-            <td><a href="/cgi-bin/koha/admin/biblio_framework.pl?op=delete_confirm&amp;frameworkcode=[% loo.frameworkcode %]">Delete</a></td>
+            <td><a href="/cgi-bin/koha/admin/biblio_framework.pl?op=add_form&amp;frameworkcode=[% loo.frameworkcode |html %]">Edit</a></td>
+            <td><a href="/cgi-bin/koha/admin/biblio_framework.pl?op=delete_confirm&amp;frameworkcode=[% loo.frameworkcode |html %]">Delete</a></td>
             <td>
 
                 <!-- Button to trigger modal -->
index 36c4f2b..305741a 100644 (file)
@@ -142,17 +142,17 @@ tinyMCE.init({
                 <li>
                     [% IF library %]
                         <span class="label">Library code: </span>
-                        <input type="hidden" name="branchcode" value="[% library.branchcode %]" />
+                        <input type="hidden" name="branchcode" value="[% library.branchcode |html %]" />
                         [% library.branchcode %]
                     [% ELSE %]
                         <label for="branchcode" class="required">Library code: </label>
-                        <input type="text" name="branchcode" id="branchcode" size="10" maxlength="10" value="[% library.branchcode %]" class="required" required="required" />
+                        <input type="text" name="branchcode" id="branchcode" size="10" maxlength="10" value="[% library.branchcode |html %]" class="required" required="required" />
                         <span class="required">Required</span>
                     [% END %]
                 </li>
                 <li>
                     <label for="branchname" class="required">Name: </label>
-                    <input type="text" name="branchname" id="branchname" size="80" value="[% library.branchname %]" class="required" required="required" />
+                    <input type="text" name="branchname" id="branchname" size="80" value="[% library.branchname |html %]" class="required" required="required" />
                     <span class="required">Required</span>
                 </li>
             </ol>
@@ -176,22 +176,22 @@ tinyMCE.init({
         [% END %]
         <fieldset class="rows">
             <ol>
-                <li><label for="branchaddress1">Address line 1: </label><input type="text" name="branchaddress1" id="branchaddress1" size="60" value="[% library.branchaddress1 %]" /></li>
-                <li><label for="branchaddress2">Address line 2: </label><input type="text" name="branchaddress2" id="branchaddress2" size="60" value="[% library.branchaddress2 %]" /></li>
-                <li><label for="branchaddress3">Address line 3: </label><input type="text" name="branchaddress3" id="branchaddress3" size="60" value="[% library.branchaddress3 %]" /></li>
-                <li><label for="branchcity">City: </label><input type="text" name="branchcity" id="branchcity" size="60" value="[% library.branchcity %]" /></li>
-                <li><label for="branchstate">State: </label><input type="text" name="branchstate" id="branchstate" size="60" value="[% library.branchstate %]" /></li>
-                <li><label for="branchzip">ZIP/Postal code: </label><input type="text" name="branchzip" id="branchzip"  size="25" maxlength="25" value="[% library.branchzip %]" /></li>
-                <li><label for="branchcountry">Country: </label><input type="text" name="branchcountry" id="branchcountry" size="60" value="[% library.branchcountry %]" /></li>
-                <li><label for="branchphone">Phone: </label><input type="text" name="branchphone" id="branchphone" size="60" value="[% library.branchphone %]" /></li>
-                <li><label for="branchfax">Fax: </label><input type="text" name="branchfax" id="branchfax" size="60" value="[% library.branchfax %]" /></li>
-                <li><label for="branchemail">Email: </label><input type="text" name="branchemail" id="branchemail" class="email"  size="80" value="[% library.branchemail %]" /></li>
-                <li><label for="branchreplyto">Reply-To (if different to Email): </label> <input type="text" name="branchreplyto" id="branchreplyto" class="email"  size="80" value="[% library.branchreplyto %]" /></li>
-                <li><label for="branchreturnpath">Return-Path (if different to Email): </label> <input type="text" name="branchreturnpath" id="branchreturnpath" class="email"  size="80" value="[% library.branchreturnpath %]" /></li>
-                <li><label for="branchurl">URL: </label><input type="text" name="branchurl" id="branchurl"  size="80" value="[% library.branchurl %]" class="url" /></li>
-                <li><label for="opac_info">OPAC info: </label><textarea name="opac_info" id="opac_info">[% library.opac_info.raw %]</textarea></li>
-                <li><label for="branchip">IP: </label><input type="text" name="branchip" id="branchip"  size="15" maxlength="15" value="[% library.branchip %]" /> <span class="hint">Can be entered as a single IP, or a subnet such as 192.168.1.*</span></li>
-                <li><label for="branchnotes">Notes: </label><input type="text" name="branchnotes" id="branchnotes" size="80" value="[% library.branchnotes %]" /></li>
+                <li><label for="branchaddress1">Address line 1: </label><input type="text" name="branchaddress1" id="branchaddress1" size="60" value="[% library.branchaddress1 |html %]" /></li>
+                <li><label for="branchaddress2">Address line 2: </label><input type="text" name="branchaddress2" id="branchaddress2" size="60" value="[% library.branchaddress2 |html %]" /></li>
+                <li><label for="branchaddress3">Address line 3: </label><input type="text" name="branchaddress3" id="branchaddress3" size="60" value="[% library.branchaddress3 |html %]" /></li>
+                <li><label for="branchcity">City: </label><input type="text" name="branchcity" id="branchcity" size="60" value="[% library.branchcity |html %]" /></li>
+                <li><label for="branchstate">State: </label><input type="text" name="branchstate" id="branchstate" size="60" value="[% library.branchstate |html %]" /></li>
+                <li><label for="branchzip">ZIP/Postal code: </label><input type="text" name="branchzip" id="branchzip"  size="25" maxlength="25" value="[% library.branchzip |html %]" /></li>
+                <li><label for="branchcountry">Country: </label><input type="text" name="branchcountry" id="branchcountry" size="60" value="[% library.branchcountry |html %]" /></li>
+                <li><label for="branchphone">Phone: </label><input type="text" name="branchphone" id="branchphone" size="60" value="[% library.branchphone |html %]" /></li>
+                <li><label for="branchfax">Fax: </label><input type="text" name="branchfax" id="branchfax" size="60" value="[% library.branchfax |html %]" /></li>
+                <li><label for="branchemail">Email: </label><input type="text" name="branchemail" id="branchemail" class="email"  size="80" value="[% library.branchemail |html %]" /></li>
+                <li><label for="branchreplyto">Reply-To (if different to Email): </label> <input type="text" name="branchreplyto" id="branchreplyto" class="email"  size="80" value="[% library.branchreplyto |html %]" /></li>
+                <li><label for="branchreturnpath">Return-Path (if different to Email): </label> <input type="text" name="branchreturnpath" id="branchreturnpath" class="email"  size="80" value="[% library.branchreturnpath |html %]" /></li>
+                <li><label for="branchurl">URL: </label><input type="text" name="branchurl" id="branchurl"  size="80" value="[% library.branchurl |html %]" class="url" /></li>
+                <li><label for="opac_info">OPAC info: </label><textarea name="opac_info" id="opac_info">[% library.opac_info |html %]</textarea></li>
+                <li><label for="branchip">IP: </label><input type="text" name="branchip" id="branchip"  size="15" maxlength="15" value="[% library.branchip |html %]" /> <span class="hint">Can be entered as a single IP, or a subnet such as 192.168.1.*</span></li>
+                <li><label for="branchnotes">Notes: </label><input type="text" name="branchnotes" id="branchnotes" size="80" value="[% library.branchnotes |html %]" /></li>
             </ol>
         </fieldset>
         <fieldset class="action">
@@ -206,8 +206,8 @@ tinyMCE.init({
         <fieldset>
             <legend>Confirm deletion of [% library.branchname %] ([% library.branchcode %])?</legend>
             <input type="hidden" name="op" value="delete_confirmed" />
-            <input type="hidden" name="branchcode" value="[% library.branchcode %]" />
-            <input type="hidden" name="branchname" value="[% library.branchname %]">
+            <input type="hidden" name="branchcode" value="[% library.branchcode |html %]" />
+            <input type="hidden" name="branchname" value="[% library.branchname |html %]">
             <fieldset class="action">
                 <input type="submit" value="Delete Library" />
                 <a class="cancel" href="/cgi-bin/koha/admin/branches.pl">Cancel</a>
@@ -234,34 +234,34 @@ tinyMCE.init({
             <tbody>
                 [% FOREACH library IN libraries %]
                     <tr>
-                        <td>[% library.branchname %]</td>
-                        <td>[% library.branchcode %]</td>
+                        <td>[% library.branchname |html %]</td>
+                        <td>[% library.branchcode |html %]</td>
                         <td>
                             [% IF library.branchaddress1 %]
-                                [% library.branchaddress1 %][% END %]
+                                [% library.branchaddress1 |html %][% END %]
                             [% IF library.branchaddress2 %]
-                                <br />[% library.branchaddress2 %][% END %]
+                                <br />[% library.branchaddress2 |html %][% END %]
                             [% IF library.branchaddress3 %]
-                                <br />[% library.branchaddress3 %][% END %]
+                                <br />[% library.branchaddress3 |html %][% END %]
                             [% IF library.branchcity %]
-                                <br />[% library.branchcity %][% END %][% IF ( library.branchstate ) %],
-                                [% library.branchstate %][% END %]
+                                <br />[% library.branchcity |html %][% END %][% IF ( library.branchstate ) %],
+                                [% library.branchstate |html %][% END %]
                             [% IF library.branchzip %]
-                                [% library.branchzip %][% END %]
+                                [% library.branchzip |html %][% END %]
                             [% IF library.branchcountry %]
-                                <br />[% library.branchcountry %][% END %]
+                                <br />[% library.branchcountry |html %][% END %]
                             [% IF library.branchphone %]
-                                <br />Ph: [% library.branchphone %][% END %]
+                                <br />Ph: [% library.branchphone |html %][% END %]
                             [% IF library.branchfax %]
-                                <br />Fax: [% library.branchfax %][% END %]
+                                <br />Fax: [% library.branchfax |html %][% END %]
                             [% IF library.branchemail %]
-                                <br /><a href="mailto:[% library.branchemail %]">[% library.branchemail %]</a>[% END %]
+                                <br /><a href="mailto:[% library.branchemail %]">[% library.branchemail |html %]</a>[% END %]
                             [% IF library.branchurl %]
-                                <br /><a href="[% library.branchurl %]">[% library.branchurl %]</a>[% END %]
+                                <br /><a href="[% library.branchurl %]">[% library.branchurl |html %]</a>[% END %]
                             [% IF library.opac_info %]
-                                <br />OPAC Info: <div>[% library.opac_info.raw %]</div>[% END %]
+                                <br />OPAC Info: <div>[% library.opac_info %]</div>[% END %]
                             [% IF library.branchnotes %]
-                                <br />Notes: [% library.branchnotes %][% END %]
+                                <br />Notes: [% library.branchnotes |html %][% END %]
                         </td>
                         <td>
                             [% FOREACH category IN library.get_categories %]
@@ -339,7 +339,7 @@ tinyMCE.init({
                 <li>
                     [% IF category.categorycode %]
                         <span class="label">Category code: </span>
-                        <input type="hidden" name="categorycode" id="categorycode" value="[% category.categorycode %]" />
+                        <input type="hidden" name="categorycode" id="categorycode" value="[% category.categorycode |html %]" />
                         [% category.categorycode %]
                     [% ELSE %]
                         <label for="categorycode">Category code:</label>
@@ -348,11 +348,11 @@ tinyMCE.init({
                 </li>
                 <li>
                     <label for="categoryname">Name: </label>
-                    <input type="text" name="categoryname" id="categoryname" size="32" maxlength="32" value="[% category.categoryname %]" />
+                    <input type="text" name="categoryname" id="categoryname" size="32" maxlength="32" value="[% category.categoryname |html %]" />
                 </li>
                 <li>
                     <label for="codedescription">Description: </label>
-                    <input type="text" name="codedescription" id="codedescription" size="70" value="[% category.codedescription %]" />
+                    <input type="text" name="codedescription" id="codedescription" size="70" value="[% category.codedescription |html %]" />
                 </li>
                 <li>
                     <label for="categorytype">Category type: </label>
@@ -363,6 +363,7 @@ tinyMCE.init({
                         [% ELSE %]
                             <option value="searchdomain">Search domain</option>
                             <option value="properties">Properties</option>
+
                         [% END %]
                     </select>
                 </li>
@@ -385,7 +386,7 @@ tinyMCE.init({
     Are you sure you want to delete the group '[% category.codedescription %]' ([% category.categorycode %])?
     <form action="/cgi-bin/koha/admin/branches.pl" method="post">
         <input type="hidden" name="op" value="delete_confirmed_category" />
-        <input type="hidden" name="categorycode" value="[% category.categorycode %]" />
+        <input type="hidden" name="categorycode" value="[% category.categorycode |html %]" />
         <input type="submit" value="Delete" />
         <a class="cancel" href="/cgi-bin/koha/admin/branches.pl">Cancel</a>
     </form>
index 79a54e0..d4d0130 100644 (file)
@@ -2,8 +2,8 @@
 [% USE KohaDates %]
 [% USE Price %]
 [% INCLUDE 'doc-head-open.inc' %]
-<title>Koha &rsaquo; Administration &rsaquo; Patron categories &rsaquo; [% IF op == 'add_form' %][% IF ( categorycode ) %]Modify category '[% categorycode %]'[% ELSE %]New category[% END %][% END %]
-[% IF op == 'delete_confirm' %][% IF ( patrons_in_category > 0 ) %]Cannot delete: category [% categorycode %] in use[% ELSE %]Confirm deletion of category '[% categorycode %]'[% END %][% END %]
+<title>Koha &rsaquo; Administration &rsaquo; Patron categories &rsaquo; [% IF op == 'add_form' %][% IF ( categorycode ) %]Modify category '[% categorycode |html %]'[% ELSE %]New category[% END %][% END %]
+[% IF op == 'delete_confirm' %][% IF ( patrons_in_category > 0 ) %]Cannot delete: category [% categorycode |html %] in use[% ELSE %]Confirm deletion of category '[% categorycode |html %]'[% END %][% END %]
 </title>
 [% INCLUDE 'doc-head-close.inc' %]
 [% INCLUDE 'calendar.inc' %]
 [% INCLUDE 'header.inc' %]
 [% INCLUDE 'patrons-admin-search.inc' %]
 
-<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/admin/admin-home.pl">Administration</a> &rsaquo; [% IF op == 'add_form' %] <a href="/cgi-bin/koha/admin/categories.pl">Patron categories</a> &rsaquo; [% IF ( categorycode ) %]Modify category '[% categorycode %]'[% ELSE %]New category[% END %][% END %]
-[% IF op == 'delete_confirm' %] <a href="/cgi-bin/koha/admin/categories.pl">Patron categories</a> &rsaquo; [% IF ( patrons_in_category > 0 ) %]Cannot delete: Category [% categorycode %] in use[% ELSE %]Confirm deletion of category '[% categorycode %]'[% END %][% END %]
+<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/admin/admin-home.pl">Administration</a> &rsaquo; [% IF op == 'add_form' %] <a href="/cgi-bin/koha/admin/categories.pl">Patron categories</a> &rsaquo; [% IF ( categorycode ) %]Modify category '[% categorycode |html %]'[% ELSE %]New category[% END %][% END %]
+[% IF op == 'delete_confirm' %] <a href="/cgi-bin/koha/admin/categories.pl">Patron categories</a> &rsaquo; [% IF ( patrons_in_category > 0 ) %]Cannot delete: Category [% categorycode |html %] in use[% ELSE %]Confirm deletion of category '[% categorycode |html %]'[% END %][% END %]
 [% IF op == 'delete_confirmed' %] <a href="/cgi-bin/koha/admin/categories.pl">Patron categories</a> &rsaquo; Category deleted[% END %]
 [% IF op == 'list' %]Patron categories[% END %]</div>
 
         <input type="hidden" name="op" value="add_validate" />
         <input type="hidden" name="checked" value="0" />
         [% IF category %]
-            <h1>Modify category [% categorycode %]</h1>
+            <h1>Modify category [% categorycode |html %]</h1>
         [% ELSE %]
             <h1>New category</h1>
         [% END %]
             <ol>
                 [% IF category %]
                     <li>
-                        <span class="label">Category code: </span>[% categorycode %]
-                        <input type="hidden" name="categorycode" value="[% category.categorycode %]" /><input type="hidden" name="is_a_modif" value="1" />
+                        <span class="label">Category code: </span>[% categorycode |html %]
+                        <input type="hidden" name="categorycode" value="[% category.categorycode |html %]" /><input type="hidden" name="is_a_modif" value="1" />
                     </li>
                 [% ELSE %]
                     <li>
                 [% END %]
                 <li>
                     <label for="description" class="required">Description: </label>
-                    <input type="text" name="description" id="description" size="40" maxlength="80" value="[% category.description %]" />
+                    <input type="text" name="description" id="description" size="40" maxlength="80" value="[% category.description |html %]" />
                     <span class="required">Required</span>
                 </li>
                 <li>
         <fieldset>
             <legend>
                 [% IF patrons_in_category > 0 %]
-                    Category [% categorycode %] is in use.  Deletion not possible!
+                    Category [% categorycode |html %] is in use.  Deletion not possible!
                 [% ELSE %]
-                    Confirm deletion of category [% categorycode %]
+                    Confirm deletion of category [% categorycode |html %]
                 [% END %]
             </legend>
 
                 </div>
             [% END %]
             <table>
-                <tr><th scope="row">Category code: </th><td>[% category.categorycode %]</td></tr>
-                <tr><th scope="row">Description: </th><td>[% category.description %]</td></tr>
+                <tr><th scope="row">Category code: </th><td>[% category.categorycode |html %]</td></tr>
+                <tr><th scope="row">Description: </th><td>[% category.description |html %]</td></tr>
                 <tr><th scope="row">Enrollment period: </th>
                     <td>
                         [% IF category.enrolmentperiod %]
                     <input type="submit" value="OK" />
                 [% ELSE %]
                     <input type="hidden" name="op" value="delete_confirmed" />
-                    <input type="hidden" name="categorycode" value="[% categorycode %]" />
+                    <input type="hidden" name="categorycode" value="[% categorycode |html %]" />
                     <input type="submit" value="Delete this category" />
                     <a class="cancel" href="/cgi-bin/koha/admin/categories.pl">Cancel</a>
                 [% END %]
             <tbody>
                 [% FOREACH category IN categories %]
                     <tr>
-                        <td>[% category.categorycode %]</td>
+                        <td>[% category.categorycode |html %]</td>
                         <td>
-                            <a href="/cgi-bin/koha/admin/categories.pl?op=add_form&amp;categorycode=[% category.categorycode |uri %]">[% category.description %]</a>
+                            <a href="/cgi-bin/koha/admin/categories.pl?op=add_form&amp;categorycode=[% category.categorycode |uri %]">[% category.description |html %]</a>
                         </td>
                         <td>
                             [% SWITCH category.category_type %]
index 01e27df..7143661 100644 (file)
                 [% END %]
                 <li>
                     <label for="city_name" class="required">City: </label>
-                    <input type="text" name="city_name" id="city_name" size="80" maxlength="100" value="[% city.city_name %]" required="required" class="required" /> <span class="required">Required</span>
+                    <input type="text" name="city_name" id="city_name" size="80" maxlength="100" value="[% city.city_name |html %]" required="required" class="required" /> <span class="required">Required</span>
                 </li>
                 <li>
                     <label for="city_state">State: </label>
-                    <input type="text" name="city_state" id="city_state" size="80" maxlength="100" value="[% city.city_state %]" />
+                    <input type="text" name="city_state" id="city_state" size="80" maxlength="100" value="[% city.city_state |html %]" />
                 </li>
                 <li>
                     <label for="city_zipcode" class="required">ZIP/Postal code: </label>
@@ -92,7 +92,7 @@
                 </li>
                 <li>
                     <label for="city_country">Country: </label>
-                    <input type="text" name="city_country" id="city_country" size="80" maxlength="100" value="[% city.city_country %]" />
+                    <input type="text" name="city_country" id="city_country" size="80" maxlength="100" value="[% city.city_country |html %]" />
                 </li>
             </ol>
         </fieldset>
index dbcdfef..3bea496 100644 (file)
@@ -117,7 +117,7 @@ function CheckRuleForm(f) {
        </li>
        <li><label for="description">Description: </label>
            <input type="text" id="description" name="description" size="50" maxlength="250" 
-                  value="[% description %]" />
+                  value="[% description |html %]" />
        </li>
        <li><label for="used">Source in use?</label>
            [% IF ( used ) %]<input type="checkbox" id="used" name="used" value="used" checked="checked" />[% ELSE %]
@@ -165,7 +165,7 @@ function CheckRuleForm(f) {
        </li>
        <li><label for="description">Description: </label>
            <input type="text" id="description" name="description" size="50" maxlength="250" 
-                  value="[% description %]" />
+                  value="[% description |html %]" />
        </li>
        <li><label for="sort_routine">Filing routine: </label>
            <select id="sort_routine" name="sort_routine">
@@ -256,14 +256,14 @@ function CheckRuleForm(f) {
     <td>[% IF ( class_source.used ) %]Yes[% ELSE %]No[% END %]</td>
     <td>[% class_source.sortrule %]</td>
     <td>
-      <a href="[% class_source.script_name %]?op=edit_source&amp;class_source=[% class_source.code %]">Edit</a>
-      <a href="[% class_source.script_name %]?op=delete_source&amp;class_source=[% class_source.code %]">Delete</a>
+      <a href="[% class_source.script_name %]?op=edit_source&amp;class_source=[% class_source.code |html %]">Edit</a>
+      <a href="[% class_source.script_name %]?op=delete_source&amp;class_source=[% class_source.code |html %]">Delete</a>
     </td>
   </tr>
   [% END %]
 </table>
 
-<div class="pages">[% pagination_bar.raw %]</div>
+<div class="pages">[% pagination_bar %]</div>
 
 <h2>Classification filing rules</h2>
 [% IF ( added_rule ) %]
@@ -292,13 +292,13 @@ function CheckRuleForm(f) {
     <td>[% class_sort_rule.description %]</td>
     <td>[% class_sort_rule.sort_routine %]</td>
     <td>
-      <a href="[% class_sort_rule.script_name %]?op=edit_sort_rule&amp;sort_rule=[% class_sort_rule.rule %]">Edit</a>
-      <a href="[% class_sort_rule.script_name %]?op=delete_sort_rule&amp;sort_rule=[% class_sort_rule.rule %]">Delete</a>
+      <a href="[% class_sort_rule.script_name %]?op=edit_sort_rule&amp;sort_rule=[% class_sort_rule.rule |html %]">Edit</a>
+      <a href="[% class_sort_rule.script_name %]?op=delete_sort_rule&amp;sort_rule=[% class_sort_rule.rule |html %]">Delete</a>
     </td>
   </tr>
   [% END %]
 </table>
-<div class="paginationBar">[% pagination_bar.raw %]</div>
+<div class="paginationBar">[% pagination_bar %]</div>
 
 [% END %]
 
index 74339fc..6c94bb2 100644 (file)
@@ -25,7 +25,7 @@
     }
 
     $(document).ready(function() {
-        columns_settings = [% ColumnsSettings.GetColumns( 'admin', 'currency', 'currencies-table', 'json' ).raw %]
+        columns_settings = [% ColumnsSettings.GetColumns( 'admin', 'currency', 'currencies-table', 'json' ) %]
         var issuest = KohaTable("#currencies-table", {
             "sDom": 'C<"clearfix">t',
             "aaSorting": [],
           <tr>
             <td>[% loo.currency %]</td>
             <td>[% loo.rate %]</td>
-            <td>[% loo.symbol %]</td>
-            <td>[% loo.isocode %]</td>
+            <td>[% loo.symbol |html %]</td>
+            <td>[% loo.isocode |html %]</td>
             <td><span title="[% loo.timestamp %]">[% loo.timestamp | $KohaDates %]</span></td>
             <td style="color:green;">[% IF ( loo.active ) %]✓[% END %]</td>
             <td>
index 432ec8a..bcd8c4d 100644 (file)
@@ -139,7 +139,7 @@ Item types administration
                 [% END %]
                 <li>
                     <label for="description" class="required">Description: </label>
-                    <input type="text" id="description" name="description" size="48" value="[% itemtype.description %]" required="required" /> <span class="required">Required</span>
+                    <input type="text" id="description" name="description" size="48" value="[% itemtype.description |html %]" required="required" /> <span class="required">Required</span>
                     <a href="/cgi-bin/koha/admin/localization.pl?entity=itemtypes&code=[% itemtype.itemtype %]" title="Translate item type [% itemtype.itemtype %]" rel="gb_page_center[600,500]"><i class="icon-edit"></i> Translate into other languages</a>
                 </li>
                 <li>
@@ -347,7 +347,7 @@ Item types administration
             <tr>
            [% UNLESS Koha.Preference('noItemTypeImages') %] <td>[% IF itemtype.image_location %]<img src="[% itemtype.image_location %]" alt="" />[% ELSE %]&nbsp;[% END %]</td>[% END %]
             <td>
-              <a href="/cgi-bin/koha/admin/itemtypes.pl?op=add_form&amp;itemtype=[% itemtype.itemtype %]">
+              <a href="/cgi-bin/koha/admin/itemtypes.pl?op=add_form&amp;itemtype=[% itemtype.itemtype |html %]">
                 [% itemtype.itemtype %]
               </a>
             </td>
@@ -376,8 +376,8 @@ Item types administration
             </td>
             <td>[% itemtype.checkinmsg | html_line_break %]</td>
             <td>
-              <a href="/cgi-bin/koha/admin/itemtypes.pl?op=add_form&amp;itemtype=[% itemtype.itemtype %]">Edit</a>
-              <a href="/cgi-bin/koha/admin/itemtypes.pl?op=delete_confirm&amp;itemtype=[% itemtype.itemtype %]">Delete</a>
+              <a href="/cgi-bin/koha/admin/itemtypes.pl?op=add_form&amp;itemtype=[% itemtype.itemtype |html %]">Edit</a>
+              <a href="/cgi-bin/koha/admin/itemtypes.pl?op=delete_confirm&amp;itemtype=[% itemtype.itemtype |html %]">Delete</a>
             </td>
           </tr>
           [% END %]
index ea573d4..bd76f43 100644 (file)
@@ -170,16 +170,16 @@ function populateHiddenCheckboxes(tab) {
   <a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/admin/admin-home.pl">Administration</a> &rsaquo; <a href="/cgi-bin/koha/admin/biblio_framework.pl">MARC frameworks</a> &rsaquo; <a href="/cgi-bin/koha/admin/marctagstructure.pl?frameworkcode=[% frameworkcode %]&amp;searchfield=[% tagfield | uri %]">[% IF ( frameworkcode ) %][% frameworkcode %][% ELSE %]Default[% END %] framework structure</a> &rsaquo;
   [% IF ( add_form ) %]
   [% IF ( use_heading_flags_p ) %]
-  [% IF ( heading_edit_subfields_p ) %] <a href="/cgi-bin/koha/admin/marc_subfields_structure.pl?tagfield=[% tagfield | uri %]&amp;frameworkcode=[% frameworkcode %]">Tag [% tagfield %] subfield structure</a> &rsaquo; Edit subfields constraints
+  [% IF ( heading_edit_subfields_p ) %] <a href="/cgi-bin/koha/admin/marc_subfields_structure.pl?tagfield=[% tagfield | uri %]&amp;frameworkcode=[% frameworkcode %]">Tag [% tagfield | html %] subfield structure</a> &rsaquo; Edit subfields constraints
   [% END %]
-  [% ELSE %] <a href="/cgi-bin/koha/admin/marc_subfields_structure.pl?tagfield=[% tagfield | uri %]&amp;frameworkcode=[% frameworkcode %]">Tag [% tagfield %] Subfield structure</a> &rsaquo; [% action %]
+  [% ELSE %] <a href="/cgi-bin/koha/admin/marc_subfields_structure.pl?tagfield=[% tagfield | uri %]&amp;frameworkcode=[% frameworkcode %]">Tag [% tagfield | html %] Subfield structure</a> &rsaquo; [% action %]
   [% END %]
   [% END %]
-[% IF ( delete_confirm ) %] <a href="/cgi-bin/koha/admin/marc_subfields_structure.pl?tagfield=[% tagfield | uri %]&amp;frameworkcode=[% frameworkcode %]">Tag [% tagfield %] Subfield structure</a> &rsaquo; Confirm deletion of subfield [% tagsubfield %]
+[% IF ( delete_confirm ) %] <a href="/cgi-bin/koha/admin/marc_subfields_structure.pl?tagfield=[% tagfield | uri %]&amp;frameworkcode=[% frameworkcode %]">Tag [% tagfield | html %] Subfield structure</a> &rsaquo; Confirm deletion of subfield [% tagsubfield %]
 [% END %]
-[% IF ( delete_confirmed ) %] <a href="/cgi-bin/koha/admin/marc_subfields_structure.pl?tagfield=[% tagfield | uri %]&amp;frameworkcode=[% frameworkcode %]">Tag [% tagfield %] subfield structure</a> &rsaquo; Subfield deleted
+[% IF ( delete_confirmed ) %] <a href="/cgi-bin/koha/admin/marc_subfields_structure.pl?tagfield=[% tagfield | uri %]&amp;frameworkcode=[% frameworkcode %]">Tag [% tagfield | html %] subfield structure</a> &rsaquo; Subfield deleted
 [% END %]
-[% IF ( else ) %]Tag [% tagfield %] Subfield structure[% END %]
+[% IF ( else ) %]Tag [% tagfield | html %] Subfield structure[% END %]
 </div>
 
 <div id="doc" class="yui-t7">
@@ -191,14 +191,14 @@ function populateHiddenCheckboxes(tab) {
 [% IF ( add_form ) %]
     <h1>
         [% IF ( use_heading_flags_p ) %]
-            [% IF ( heading_edit_subfields_p ) %]Tag [% tagfield %] Subfield constraints[% END %]
+            [% IF ( heading_edit_subfields_p ) %]Tag [% tagfield | html %] Subfield constraints[% END %]
         [% ELSE %]
             [% action %]
         [% END %]
     </h1>
     <form action="[% script_name %]" name="Aform" method="post">
     <input type="hidden" name="op" value="add_validate" />
-    <input type="hidden" name="tagfield" value="[% tagfield %]" />
+    <input type="hidden" name="tagfield" value="[% tagfield | html %]" />
     <input type="hidden" name="frameworkcode" value="[% frameworkcode %]" />
     <div id="subfieldtabs" class="toptabs numbered">
    <ul>
@@ -352,7 +352,7 @@ function populateHiddenCheckboxes(tab) {
 
             <form action="[% delete_link %]" method="post"><input type="hidden" name="op" value="delete_confirmed" />
                 <input type="hidden" name="searchfield" value="[% searchfield %]" />
-                <input type="hidden" name="tagfield" value="[% tagfield  %]" />
+                <input type="hidden" name="tagfield" value="[% tagfield  | html %]" />
                                <input type="hidden" name="tagsubfield" value="[% tagsubfield %]" />
                                <input type="hidden" name="frameworkcode" value="[% frameworkcode %]" />
                                <input type="submit" value="Yes, delete this subfield" />
@@ -360,7 +360,7 @@ function populateHiddenCheckboxes(tab) {
                        
                        <form action="[% script_name %]" method="post">
                        <input type="hidden" name="searchfield" value="[% searchfield %]" />
-                        <input type="hidden" name="tagfield" value="[% tagfield %]" />
+                        <input type="hidden" name="tagfield" value="[% tagfield | html %]" />
                        <input type="hidden" name="tagsubfield" value="[% tagsubfield %]" />
                        <input type="hidden" name="frameworkcode" value="[% frameworkcode %]" />
                        <input type="submit" value="No, do not delete" />
@@ -371,14 +371,14 @@ function populateHiddenCheckboxes(tab) {
 
     <h3>Data deleted</h3>
     <form action="[% script_name %]" method="post">
-        <input type="hidden" name="tagfield" value="[% tagfield %]" />
+        <input type="hidden" name="tagfield" value="[% tagfield | html %]" />
     <input type="submit" value="OK" />
     </form>
 [% END %]
 
 
 [% IF ( else ) %]
-<h1>MARC subfield structure admin for [% tagfield %] [% IF ( frameworkcode ) %](framework [% frameworkcode %])[% ELSE %](default framework)[% END %]</h1>
+<h1>MARC subfield structure admin for [% tagfield | html %] [% IF ( frameworkcode ) %](framework [% frameworkcode %])[% ELSE %](default framework)[% END %]</h1>
 <p>This screen shows the subfields associated with the selected tag. You can edit subfields or add a new one by clicking on edit.</p>
 <p>The column 'Koha field' shows that the subfield is linked with a Koha field.</p>
 
index 2398312..bd42b65 100644 (file)
@@ -77,8 +77,8 @@ $(document).ready(function() {
                     <span class="required">Required</span>
                 [% END %]
             </li>
-    <li><label for="liblibrarian">Label for lib: </label><input type="text" id="liblibrarian" name="liblibrarian" value="[% liblibrarian %]" size="40" maxlength="100" /></li>
-    <li><label for="libopac">Label for opac: </label><input type="text" id="libopac" name="libopac" value="[% libopac %]" size="40" maxlength="100" /></li>
+    <li><label for="liblibrarian">Label for lib: </label><input type="text" id="liblibrarian" name="liblibrarian" value="[% liblibrarian |html %]" size="40" maxlength="100" /></li>
+    <li><label for="libopac">Label for opac: </label><input type="text" id="libopac" name="libopac" value="[% libopac |html %]" size="40" maxlength="100" /></li>
     <li><label for="repeatable">Repeatable: </label>
         [% IF ( repeatable ) %]
             <input type="checkbox" name="repeatable" id="repeatable" value="1" checked="checked" />
index 1be78a3..64462fb 100644 (file)
@@ -214,11 +214,11 @@ function CheckRuleForm(f) {
        </li>
        <li><label for="description" class="required">Description: </label>
            <input type="text" id="description" name="description" size="50" maxlength="250" 
-                  value="[% description %]" /> <span class="required">Required</span>
+                  value="[% description |html %]" /> <span class="required">Required</span>
        </li>
        <li><label for="threshold" class="required">Match threshold: </label>
            <input type="text" id="threshold" name="threshold" size="5" maxlength="5" 
-                  value="[% threshold %]" /> <span class="required">Required</span>
+                  value="[% threshold |html %]" /> <span class="required">Required</span>
        </li>
        <li><label for="record_type" class="required">Record type: </label>
            <select id="record_type" name="record_type">
@@ -249,14 +249,14 @@ function CheckRuleForm(f) {
         <label for="mp_[% matchpoint.mp_num %]_search_index">Search index: </label>
         <input type ="text" id="mp_[% matchpoint.mp_num %]_search_index" 
                name="mp_[% matchpoint.mp_num %]_search_index" size="20" 
-               value="[% matchpoint.index %]"
+               value="[% matchpoint.index |html %]"
           maxlength="30" />
       </li>
       <li>
         <label for="mp_[% matchpoint.mp_num %]_score">Score: </label>
-        <input type ="text" id="mp_[% matchpoint.mp_num %]_score"
+        <input type ="text" id="mp_[% matchpoint.mp_num %]_score" 
                name="mp_[% matchpoint.mp_num %]_score" size="5"
-               value="[% matchpoint.score %]"
+               value="[% matchpoint.score |html %]" 
                maxlength="5" />
       </li>
       </ol>
@@ -268,28 +268,28 @@ function CheckRuleForm(f) {
             <label for="mp_[% matchpoint.mp_num %]_c_[% component.comp_num %]_tag">Tag: </label>
             <input type="text" id="mp_[% matchpoint.mp_num %]_c_[% component.comp_num %]_tag" 
                    name="mp_[% matchpoint.mp_num %]_c_[% component.comp_num %]_tag" 
-                   value="[% component.tag %]"
+                   value="[% component.tag |html %]"
                    size="3" maxlength="3" />
           </li>
           <li>
             <label for="mp_[% matchpoint.mp_num %]_c_[% component.comp_num %]_subfields">Subfields: </label>
             <input type="text" id="mp_[% matchpoint.mp_num %]_c_[% component.comp_num %]_subfields" 
                    name="mp_[% matchpoint.mp_num %]_c_[% component.comp_num %]_subfields" 
-                   value="[% component.subfields %]"
+                   value="[% component.subfields |html %]"
                    size="10" maxlength="40" />
           </li>
           <li>
             <label for="mp_[% matchpoint.mp_num %]_c_[% component.comp_num %]_offset">Offset: </label>
             <input type="text" id="mp_[% matchpoint.mp_num %]_c_[% component.comp_num %]_offset" 
                    name="mp_[% matchpoint.mp_num %]_c_[% component.comp_num %]_offset" 
-                   value="[% component.offset %]"
+                   value="[% component.offset |html %]"
                    size="5" maxlength="5" />
           </li>
           <li>
             <label for="mp_[% matchpoint.mp_num %]_c_[% component.comp_num %]_length">Length: </label>
             <input type="text" id="mp_[% matchpoint.mp_num %]_c_[% component.comp_num %]_length" 
                    name="mp_[% matchpoint.mp_num %]_c_[% component.comp_num %]_length" 
-                   value="[% component.length %]"
+                   value="[% component.length |html %]"
                    size="5" maxlength="5" />
           </li>
               [% FOREACH norm IN component.norms %]
@@ -297,7 +297,7 @@ function CheckRuleForm(f) {
                 <label for="mp_[% matchpoint.mp_num %]_c_[% component.comp_num %]_n__[% norm.norm_num %]_norm">Normalization rule: </label>
                 <input type="text" id="mp_[% norm.mp_num %]_c_[% component.comp_num %]_n__[% norm.norm_num %]_norm" 
                        name="mp_[% matchpoint.mp_num %]_c_[% component.comp_num %]_n_[% norm.norm_num %]_norm" 
-                       value="[% norm.norm %]"
+                       value="[% norm.norm |html %]"
                        size="20" maxlength="50" />
               </li>
               [% END %]
@@ -375,28 +375,28 @@ function CheckRuleForm(f) {
             <label for="mc_[% src_component.mc_num %]_src_c_[% src_component.comp_num %]_tag">Tag: </label>
             <input type="text" id="mc_[% matchcheck.mc_num %]_src_c_[% src_component.comp_num %]_tag" 
                    name="mc_[% matchcheck.mc_num %]_src_c_[% src_component.comp_num %]_tag" 
-                   value="[% src_component.tag %]"
+                   value="[% src_component.tag |html %]"
                    size="3" maxlength="3" />
           </li>
           <li>
             <label for="mc_[% matchcheck.mc_num %]_src_c_[% src_component.comp_num %]_subfields">Subfields: </label>
             <input type="text" id="mc_[% matchcheck.mc_num %]_src_c_[% src_component.comp_num %]_subfields" 
                    name="mc_[% matchcheck.mc_num %]_src_c_[% src_component.comp_num %]_subfields" 
-                   value="[% src_component.subfields %]"
+                   value="[% src_component.subfields |html %]"
                    size="10" maxlength="40" />
           </li>
           <li>
             <label for="mc_[% matchcheck.mc_num %]_src_c_[% src_component.comp_num %]_offset">Offset: </label>
             <input type="text" id="mc_[% matchcheck.mc_num %]_src_c_[% src_component.comp_num %]_offset" 
                    name="mc_[% matchcheck.mc_num %]_src_c_[% src_component.comp_num %]_offset" 
-                   value="[% src_component.offset %]"
+                   value="[% src_component.offset |html %]"
                    size="5" maxlength="5" />
           </li>
           <li>
             <label for="mc_[% matchcheck.mc_num %]_src_c_[% src_component.comp_num %]_length">Length: </label>
             <input type="text" id="mc_[% matchcheck.mc_num %]_src_c_[% src_component.comp_num %]_length" 
                    name="mc_[% matchcheck.mc_num %]_src_c_[% src_component.comp_num %]_length" 
-                   value="[% src_component.length %]"
+                   value="[% src_component.length |html %]"
                    size="5" maxlength="5" />
           </li>
           [% FOREACH norm IN src_component.norms %]
@@ -404,7 +404,7 @@ function CheckRuleForm(f) {
               <label for="mc_[% matchcheck.mc_num %]_src_c_[% src_component.comp_num %]_n_[% norm.norm_num %]_norm">Normalization rule: </label>
               <input type="text" id="mc_[% matchcheck.mc_num %]_src_c_[% src_component.comp_num %]_n_[% norm.norm_num %]_norm" 
                      name="mc_[% matchcheck.mc_num %]_src_c_[% src_component.comp_num %]_n_[% norm.norm_num %]_norm" 
-                    value="[% norm.norm %]"
+                    value="[% norm.norm |html %]"
                     size="20" maxlength="50" />
             </li>
           [% END %]
@@ -419,28 +419,28 @@ function CheckRuleForm(f) {
             <label for="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_tag">Tag: </label>
             <input type="text" id="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_tag" 
                    name="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_tag" 
-                   value="[% tgt_component.tag %]"
+                   value="[% tgt_component.tag |html %]"
                    size="3" maxlength="3" />
           </li>
           <li>
             <label for="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_subfields">Subfields: </label>
             <input type="text" id="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_subfields" 
                    name="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_subfields" 
-                   value="[% tgt_component.subfields %]"
+                   value="[% tgt_component.subfields |html %]"
                    size="10" maxlength="40" />
           </li>
           <li>
             <label for="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_offset">Offset: </label>
             <input type="text" id="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_offset" 
                    name="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_offset" 
-                   value="[% tgt_component.offset %]"
+                   value="[% tgt_component.offset |html %]"
                    size="5" maxlength="5" />
           </li>
           <li>
             <label for="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_length">Length: </label>
             <input type="text" id="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_length" 
                    name="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_length" 
-                   value="[% tgt_component.length %]"
+                   value="[% tgt_component.length |html %]"
                    size="5" maxlength="5" />
           </li>
           [% FOREACH norm IN tgt_component.norms %]
@@ -448,7 +448,7 @@ function CheckRuleForm(f) {
               <label for="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_n_[% norm.norm_num %]_norm">Normalization rule: </label>
               <input type="text" id="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_n_[% norm.norm_num %]_norm" 
                      name="mc_[% matchcheck.mc_num %]_tgt_c_[% tgt_component.comp_num %]_n_[% norm.norm_num %]_norm" 
-                    value="[% norm.norm %]"
+                    value="[% norm.norm |html %]"
                     size="20" maxlength="50" />
             </li>
           [% END %]
@@ -571,14 +571,14 @@ function CheckRuleForm(f) {
     <td>[% available_matching_rule.code %]</td>
     <td>[% available_matching_rule.description %]</td>
     <td>
-      <a href="[% available_matching_rule.script_name %]?op=edit_matching_rule&amp;matcher_id=[% available_matching_rule.matcher_id %]">Edit</a>
-      <a href="[% available_matching_rule.script_name %]?op=delete_matching_rule&amp;matcher_id=[% available_matching_rule.matcher_id %]">Delete</a>
+      <a href="[% available_matching_rule.script_name %]?op=edit_matching_rule&amp;matcher_id=[% available_matching_rule.matcher_id |html %]">Edit</a>
+      <a href="[% available_matching_rule.script_name %]?op=delete_matching_rule&amp;matcher_id=[% available_matching_rule.matcher_id |html %]">Delete</a>
     </td>
   </tr>
   [% END %]
 </table>[% ELSE %]<p>There are no saved matching rules.</p>[% END %]
 
-<div class="pages">[% pagination_bar.raw %]</div>
+<div class="pages">[% pagination_bar %]</div>
 
 [% END %]
  [% IF ( matching_rule_form ) %]
index f362b70..5827f30 100644 (file)
@@ -8,7 +8,7 @@
   [% END %]
 [% END %]
 [% IF ( delete_attribute_type_form ) %]
-  &rsaquo; Confirm deletion of patron attribute type &quot;[% code %]&quot;
+  &rsaquo; Confirm deletion of patron attribute type &quot;[% code |html %]&quot;
 [% END %]
 </title>
 [% INCLUDE 'doc-head-close.inc' %]
@@ -62,7 +62,7 @@ function CheckAttributeTypeForm(f) {
   [% END %]
 [% END %]
 [% IF ( delete_attribute_type_form ) %]
-  &rsaquo; Confirm deletion of patron attribute type &quot;[% code %]&quot;
+  &rsaquo; Confirm deletion of patron attribute type &quot;[% code |html %]&quot;
 [% END %]
 </div>
 
@@ -94,8 +94,8 @@ function CheckAttributeTypeForm(f) {
       <li>
           [% IF ( edit_attribute_type ) %]
                  <span class="label">Patron attribute type code: </span>
-            <input type="hidden" name="code" value="[% code %]" />
-            [% code %]
+            <input type="hidden" name="code" value="[% code |html %]" />
+            [% code |html %]
           [% ELSE %]
                  <label for="code">Patron attribute type code: </label>
             <input type="text" id="code" name="code"  size="10" maxlength="10" />
@@ -103,7 +103,7 @@ function CheckAttributeTypeForm(f) {
        </li>
        <li><label for="description">Description: </label>
            <input type="text" id="description" name="description" size="50" maxlength="250" 
-                  value="[% description %]" />
+                  value="[% description |html %]" />
        </li>
        <li><label for="repeatable">Repeatable: </label>
             [% IF ( repeatable_checked ) %]
@@ -249,10 +249,10 @@ function CheckAttributeTypeForm(f) {
 [% END %]
 
 [% IF ( delete_attribute_type_form ) %]
-<div class="dialog alert"><h3>Confirm deletion of patron attribute type <span class="ex">'[% code %]' ([% description %])</span>?</h3>
+<div class="dialog alert"><h3>Confirm deletion of patron attribute type <span class="ex">'[% code |html %]' ([% description %])</span>?</h3>
 <form action="[% script_name %]" name="Aform" method="post">
   <input type="hidden" name="op" value="[% confirm_op %]" />
-  <input type="hidden" name="code" value="[% code %]" />
+  <input type="hidden" name="code" value="[% code |html %]" />
     <input type="submit" value="Delete patron attribute type" class="approve" /></form>
        <form action="[% script_name %]" method="get">
     <input type="submit" value="No, do not delete" class="deny" />
@@ -300,7 +300,7 @@ function CheckAttributeTypeForm(f) {
       <tbody>
         [% FOREACH item IN attribute.items %]
           <tr>
-            <td>[% item.code %]</td>
+            <td>[% item.code |html %]</td>
             <td>[% item.description %]</td>
             <td>
                 [% IF item.branches.size > 0 %]
@@ -320,8 +320,8 @@ function CheckAttributeTypeForm(f) {
                 [% END %]
             </td>
             <td>
-              <a href="[% item.script_name %]?op=edit_attribute_type&amp;code=[% item.code %]">Edit</a>
-              <a href="[% item.script_name %]?op=delete_attribute_type&amp;code=[% item.code %]">Delete</a>
+              <a href="[% item.script_name %]?op=edit_attribute_type&amp;code=[% item.code |html %]">Edit</a>
+              <a href="[% item.script_name %]?op=delete_attribute_type&amp;code=[% item.code |html %]">Delete</a>
             </td>
           </tr>
         [% END %]
@@ -332,7 +332,7 @@ function CheckAttributeTypeForm(f) {
   <p>There are no saved patron attribute types.</p>
 [% END %]
 
-<div class="pages">[% pagination_bar.raw %]</div>
+<div class="pages">[% pagination_bar %]</div>
 
 [% END %]
  
index fbde1cd..e42aca2 100644 (file)
@@ -70,7 +70,7 @@
     [% END %]
     [% IF ( search_not_found ) %]
     <div class="dialog alert">
-        No system preferences matched your search for <strong>[% searchfield %]</strong>. You can try a different search or <a href="/cgi-bin/koha/admin/preferences.pl?tab=[% last_tab %]">return to where you were before.</a>
+        No system preferences matched your search for <strong>[% searchfield |html %]</strong>. You can try a different search or <a href="/cgi-bin/koha/admin/preferences.pl?tab=[% last_tab %]">return to where you were before.</a>
     </div>
     [% END %]
     [% FOREACH TAB IN TABS %]
                 <td><div>
                     [% FOREACH CHUNK IN LINE.CHUNKS %]
                     [% IF ( CHUNK.type_text ) %]
-                    [% CHUNK.contents.raw %]
+                    [% CHUNK.contents %]
                     [% ELSIF ( CHUNK.type_input ) %]
                     <input type="[%IF CHUNK.input_type %][% CHUNK.input_type %][% ELSE %]text[% END %]" name="pref_[% CHUNK.name %]" id="pref_[% CHUNK.name %]" class="preference preference-[% CHUNK.class or "short" %]" value="[% CHUNK.value %]" autocomplete="off" /> [% IF ( CHUNK.dateinput ) %]<span class="hint">[% INCLUDE 'date-format.inc' %]</span>[% END %]
                     [% ELSIF ( CHUNK.type_select ) %]
index c203be6..eca3be5 100644 (file)
         [% IF ( modify ) %]Modify
         [% ELSE %]Add
         [% END %] a system preference</legend><ol>
-            <li><label for="explanation">Explanation: </label><input type="text" name="explanation" id="explanation" size="60" value="[% explanation %]" /><input type="hidden" name="op" value="add_validate" /></li>
+            <li><label for="explanation">Explanation: </label><input type="text" name="explanation" id="explanation" size="60" value="[% explanation |html %]" /><input type="hidden" name="op" value="add_validate" /></li>
             <li>[% IF ( searchfield ) %]<span class="label">Variable: </span>[% searchfield %]<input type="hidden" name="variable" value="[% searchfield %]" />
             [% ELSE %]<label for="variable">Variable: </label><input type="text" name="variable" id="variable" size="60" />[% END %]</li>
             <li><label for="value">Value: </label>
                 [% IF ( type_free ) %]
-                    <textarea id="value" name="value" cols="[% fieldlength %]">[% value %]</textarea>
+                    <textarea id="value" name="value" cols="[% fieldlength %]">[% value |html %]</textarea>
                 [% ELSIF ( type_upload ) %]
                     <input type="file" name="value" />
                 [% ELSIF ( type_textarea || type_htmlarea ) %]
                     [% IF ( type_htmlarea ) && ( Koha.Preference('UseWYSIWYGinSystemPreferences') ) %]
-                        <textarea class="mce" name="value" id="value" rows="[% rows %]" cols="[% cols %]">[% value %]</textarea>
+                        <textarea class="mce" name="value" id="value" rows="[% rows %]" cols="[% cols %]">[% value |html %]</textarea>
                     [% ELSE %]
-                    <textarea name="value" id="value" rows="[% rows %]" cols="[% cols %]">[% value %]</textarea>
+                    <textarea name="value" id="value" rows="[% rows %]" cols="[% cols %]">[% value |html %]</textarea>
                     [% END %]
                 [% ELSIF ( type_choice ) %]
                     <select name="value" id="value">
     <tbody>[% FOREACH loo IN loop %]
         <tr>
 
-        <td><strong><a href="[% loo.edit %]">[% loo.variable %]</a></strong></td><td> [% loo.explanation %]</td>
+        <td><strong><a href="[% loo.edit %]">[% loo.variable %]</a></strong></td><td> [% loo.explanation |html %]</td>
         [% IF ( loo.oneline ) %]
         <td class="single-line">
         [% ELSE %]
             <form action="/cgi-bin/koha/admin/systempreferences.pl" method="post">
         [% END %]
                 [% IF ( loo.type_free ) %]
-                <input type="text" name="value" size="[% loo.fieldlength %]" value="[% loo.value %]" />
+                <input type="text" name="value" size="[% loo.fieldlength %]" value="[% loo.value |html %]" />
                 [% END %]
                 [% IF ( loo.type_upload ) %]
-                <input type="file" name="value" value="[% loo.value %]" />
+                <input type="file" name="value" value="[% loo.value |html %]" />
                 [% END %]
                 [% IF ( loo.type_textarea ) || ( loo.type_htmlarea ) %]
                     [% IF ( loo.type_htmlarea ) && ( Koha.Preference('UseWYSIWYGinSystemPreferences') ) %]
-                        <textarea class="mce" name="value" rows="[% loo.rows %]" cols="[% loo.cols %]">[% loo.value %]</textarea>
+                        <textarea class="mce" name="value" rows="[% loo.rows %]" cols="[% loo.cols %]">[% loo.value |html %]</textarea>
                     [% ELSE %]
                         <a class="expand-textarea" style="display: none" href="#">Click to edit</a>
-                        <textarea name="value" rows="[% loo.rows %]" cols="[% loo.cols %]">[% loo.value %]</textarea>
+                        <textarea name="value" rows="[% loo.rows %]" cols="[% loo.cols %]">[% loo.value |html %]</textarea>
                     [% END %]
                 [% END %]
                 [% IF ( loo.type_choice ) %]
                 [% END %]
                 <input type="hidden" name="op" value="add_validate" />
                 <input type="hidden" name="variable" value="[% loo.variable %]" />
-                <input type="hidden" name="prefoptions" value="[% loo.prefoptions %]" />
+                <input type="hidden" name="prefoptions" value="[% loo.prefoptions |html %]" />
                 <input type="hidden" name="preftype" value="[% loo.type %]" />
-                <input type="hidden" name="explanation" value="[% loo.explanation %]" />
+                <input type="hidden" name="explanation" value="[% loo.explanation |html %]" />
                 <input type="submit" value="Save" />
             </form>
         </td>
index ccdcb9c..8131083 100644 (file)
         [% END %]                
         <fieldset class="rows">
         <ol>
-        <li><label for="name">Server name: </label><input type="text" name="servername" id="servername" size="65" maxlength="100" onblur="toUC(this)" value="[% server.servername %]"/></li>
+        <li><label for="name">Server name: </label><input type="text" name="servername" id="servername" size="65" maxlength="100" onblur="toUC(this)" value="[% server.servername | html %]"/></li>
 
         <li><label for="host" class="required">Hostname: </label> <input type="text" name="host" id="host" size="30" value="[% server.host %]" required="required" /> <span class="required">Required</span>
             [% IF (server.servertype||type) == 'sru' %]
index 31d7cbe..2896886 100644 (file)
@@ -43,7 +43,7 @@
 <form action="/cgi-bin/koha/mainpage.pl" method="post" name="loginform" id="loginform">
     <input type="hidden" name="koha_login_context" value="intranet" />
 [% FOREACH INPUT IN INPUTS %]
-    <input type="hidden" name="[% INPUT.name %]" value="[% INPUT.value %]" />
+    <input type="hidden" name="[% INPUT.name |html %]" value="[% INPUT.value |html %]" />
 [% END %]
 <p><label for="userid">Username:</label>
 <input type="text" name="userid" id="userid" class="input focus" value="[% userid %]" size="20" tabindex="1" />
index 92cceed..7faf688 100644 (file)
@@ -63,7 +63,7 @@ function AreMandatoriesNotOk(){
                [% FOREACH subfield_loo IN innerloo.subfield_loop %]
                        [% IF ( subfield_loo.mandatory ) %]mandatories.push("[% subfield_loo.id %]");
                     tab.push("[% BIG_LOO.number %]");
-                    label.push("[% subfield_loo.marc_lib.raw |replace("'", "\'") |replace('"', '\"') |replace('\n', '\\n') |replace('\r', '\\r') %]");
+                       label.push("[% subfield_loo.marc_lib |replace("'", "\'") |replace('"', '\"') |replace('\n', '\\n') |replace('\r', '\\r') %]");
                        [% END %]
                        [% END %]
                [% END %]
@@ -319,7 +319,7 @@ function confirmnotdup(redirect){
                         <img class="buttonUp" src="[% interface %]/[% theme %]/img/up.png" onclick="upSubfield('subfield[% subfield_loo.tag %][% subfield_loo.subfield %][% subfield_loo.random %]')" alt="Move Up" title="Move Up" />
                     [% END %]
                         <input type="text"
-                            title="[% subfield_loo.marc_lib.raw %]"
+                            title="[% subfield_loo.marc_lib %]"
                             style=" [% IF ( subfield_loo.fixedfield ) %]display:none; [% END %]border:0;"
                             name="tag_[% subfield_loo.tag %]_code_[% subfield_loo.subfield %]_[% subfield_loo.index %]_[% subfield_loo.index_subfield %]"
                             value="[% subfield_loo.subfield %]"
@@ -336,7 +336,7 @@ function confirmnotdup(redirect){
 
                 [% UNLESS advancedMARCEditor %]
                     [% IF ( subfield_loo.mandatory ) %]<span class="subfield subfield_mandatory">[% ELSE %]<span class="subfield">[% END %]
-                        [% subfield_loo.marc_lib.raw %]
+                        [% subfield_loo.marc_lib %]
                         [% IF ( subfield_loo.mandatory ) %]<span class="mandatory_marker" title="This field is mandatory">*</span>[% END %]
                     </span>
                     </label>
@@ -363,7 +363,7 @@ function confirmnotdup(redirect){
                     [% ELSE %]
                         <a href="#" id="buttonDot_[% mv.id %]" class="buttonDot tag_editor" title="Tag editor">...</a>
                     [% END %]
-                    [% mv.javascript.raw %]
+                    [% mv.javascript %]
                 [% ELSIF ( mv.type == 'text' ) %]
                     <input type="text" id="[%- mv.id -%]" name="[%- mv.name -%]" value="[%- mv.value -%]" class="input_marceditor" tabindex="1" size="67" maxlength="[%- mv.maxlength -%]" />
                 [% ELSIF ( mv.type == 'textarea' ) %]
index cdb25c5..fd2e92b 100644 (file)
@@ -75,7 +75,7 @@ function doauth(authid, index, repet)
                         <td>
                           [% IF resul.summary && resul.summary.authorized && resul.summary.authorized.size > 1 %]
                             [% FOREACH authorized IN resul.summary.authorized %]
-                            <a href="javascript:doauth('[% resul.authid %]', '[% index %]', '[% loop.count %]')" title="[% authorized.heading %]">[% loop.count %]</a>
+                            <a href="javascript:doauth('[% resul.authid %]', '[% index %]', '[% loop.count %]')" title="[% authorized.heading | html %]">[% loop.count %]</a>
                             [% END %]
                           [% ELSE %]
                             <a href="javascript:doauth('[% resul.authid %]', '[% index %]', '')">choose</a>
index 367d21b..be2e156 100644 (file)
@@ -56,7 +56,7 @@ function searchauthority() {
 
 <div id="merge_in_progress"></div>
 [% IF ( total ) %]
-<div class="pages">[% pagination_bar.raw %]</div>
+<div class="pages">[% pagination_bar %]</div>
 
 <p id="authorities_searchresultlist_current_page_info">
   Results [% from %] to [% to %] of [% total %]
@@ -100,7 +100,7 @@ function searchauthority() {
   </table>
 </div>
 
-<div class="paginationBar">[% pagination_bar.raw %]</div>
+<div class="paginationBar">[% pagination_bar %]</div>
 
 [% ELSE %]
   No results found
index a5a5409..ff9095c 100644 (file)
@@ -160,12 +160,12 @@ function batchDelete(){
     [% FOREACH BIBLIO_RESULT IN BIBLIO_RESULTS %]
     <h3>
         [% IF ( print_basket ) %]
-            [% BIBLIO_RESULT.title %]
+            [% BIBLIO_RESULT.title |html %]
                 [% IF ( BIBLIO_RESULT.subtitle ) %] [% BIBLIO_RESULT.subtitle %][% END %]
                 [% IF ( BIBLIO_RESULT.author ) %] [% BIBLIO_RESULT.author %][% END %]
         [% ELSE %]
                 <input type="checkbox" value="[% BIBLIO_RESULT.biblionumber %]" name="bib[% BIBLIO_RESULT.biblionumber %]" id="bib[% BIBLIO_RESULT.biblionumber %]" onclick="selRecord(value,checked)" />
-                [% BIBLIO_RESULT.title %]
+                [% BIBLIO_RESULT.title |html %]
                 [% IF ( BIBLIO_RESULT.subtitle ) %] [% BIBLIO_RESULT.subtitle %][% END %]
                 [% IF ( BIBLIO_RESULT.author ) %] [% BIBLIO_RESULT.author %][% END %]
         [% END %]
@@ -348,7 +348,7 @@ function batchDelete(){
 
                 </td> [% END %]
             <td><a href="#" onclick="openBiblio('[% BIBLIO_RESULT.dest %]',[% BIBLIO_RESULT.biblionumber %])">
-                        [% BIBLIO_RESULT.title %]
+                        [% BIBLIO_RESULT.title |html %]
                     </a>
                         [% BIBLIO_RESULT.author %]
                         <p>[% IF ( BIBLIO_RESULT.publishercode ) %]- [% BIBLIO_RESULT.publishercode %]
index c362389..c99b54e 100644 (file)
@@ -22,26 +22,26 @@ Your cart
 [% FILTER html2text %]
 
     [% IF comment %]
-        <p>[% comment.raw %]</p>
+        <p>[% comment %]</p>
         <hr/>
     [% END %]
     <ol>
     [% FOREACH BIBLIO_RESULT IN BIBLIO_RESULTS %]
         <li>
             <span>
-                [% BIBLIO_RESULT.title.raw %]
-                [% IF ( BIBLIO_RESULT.subtitle ) %] [% BIBLIO_RESULT.subtitle.raw %][% END %]
+                [% BIBLIO_RESULT.title %]
+                [% IF ( BIBLIO_RESULT.subtitle ) %] [% BIBLIO_RESULT.subtitle %][% END %]
             </span>
 
             <p>
             [% IF ( BIBLIO_RESULT.HASAUTHORS ) %]
-            <span>Author(s): [% IF ( BIBLIO_RESULT.author ) %][% BIBLIO_RESULT.author.raw %][% END %]
+            <span>Author(s): [% IF ( BIBLIO_RESULT.author ) %][% BIBLIO_RESULT.author %][% END %]
 
             [% IF ( BIBLIO_RESULT.MARCAUTHORS ) %]
                 [% IF ( BIBLIO_RESULT.author ) %]; [% END %]
                 [% FOREACH MARCAUTHOR IN BIBLIO_RESULT.MARCAUTHORS %]
                     [% FOREACH MARCAUTHOR_SUBFIELDS_LOO IN MARCAUTHOR.MARCAUTHOR_SUBFIELDS_LOOP %]
-                        [% MARCAUTHOR_SUBFIELDS_LOO.separator.raw %][% MARCAUTHOR_SUBFIELDS_LOO.value.raw %]
+                        [% MARCAUTHOR_SUBFIELDS_LOO.separator %][% MARCAUTHOR_SUBFIELDS_LOO.value %]
                     [% END %]
                     [% UNLESS ( loop.last ) %];[% END %]
                 [% END %]
@@ -51,18 +51,18 @@ Your cart
 
             [% IF ( BIBLIO_RESULT.ISBN ) %]
             <span>
-                ISBN: [% BIBLIO_RESULT.ISBN.raw %]
+                ISBN: [% BIBLIO_RESULT.ISBN %]
             </span><br/>
             [% END %]
 
             [% IF BIBLIO_RESULT.publishercode %]
             <span>
-                Published by: [% BIBLIO_RESULT.publishercode.raw %]
+                Published by: [% BIBLIO_RESULT.publishercode %]
                 [% IF ( BIBLIO_RESULT.publicationyear ) %]
-                    in [% BIBLIO_RESULT.publicationyear.raw %]
+                    in [% BIBLIO_RESULT.publicationyear %]
                 [% END %]
                 [% IF ( BIBLIO_RESULT.pages ) %]
-                    , [% BIBLIO_RESULT.pages.raw %]
+                    , [% BIBLIO_RESULT.pages %]
                 [% END %]
                 [% IF BIBLIO_RESULT.item('size') %]
                 , [% BIBLIO_RESULT.item('size') %]
@@ -72,55 +72,55 @@ Your cart
 
             [% IF BIBLIO_RESULT.collection %]
             <span>
-                Collection: [% BIBLIO_RESULT.seriestitle.raw %]
+                Collection: [% BIBLIO_RESULT.seriestitle %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.subject ) %]
             <span>
-                Subject: [% BIBLIO_RESULT.subject.raw %]
+                Subject: [% BIBLIO_RESULT.subject %]
             <span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.copyrightdate ) %]
             <span>
-                Copyright year: [% BIBLIO_RESULT.copyrightdate.raw %]
+                Copyright year: [% BIBLIO_RESULT.copyrightdate %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.notes ) %]
             <span>
-                Notes : [% BIBLIO_RESULT.notes.raw %]
+                Notes : [% BIBLIO_RESULT.notes %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.unititle ) %]
             <span>
-                Unified title: [% BIBLIO_RESULT.unititle.raw %]
+                Unified title: [% BIBLIO_RESULT.unititle %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.serial ) %]
             <span>
-                Serial: [% BIBLIO_RESULT.serial.raw %]
+                Serial: [% BIBLIO_RESULT.serial %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.dewey ) %]
             <span>
-                Dewey: [% BIBLIO_RESULT.dewey.raw %]
+                Dewey: [% BIBLIO_RESULT.dewey %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.classification ) %]
             <span>
-                Classification: [% BIBLIO_RESULT.classification.raw %]
+                Classification: [% BIBLIO_RESULT.classification %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.lccn ) %]
             <span>
-                LCCN: [% BIBLIO_RESULT.lccn.raw %]
+                LCCN: [% BIBLIO_RESULT.lccn %]
             </span><br/>
             [% END %]
             [% IF ( BIBLIO_RESULT.url ) %]
@@ -132,17 +132,17 @@ Your cart
 
             [% IF ( OPACBaseURL ) %]
             <p>
-                In online catalog: [% OPACBaseURL.raw %]/cgi-bin/koha/opac-detail.pl?biblionumber=[% BIBLIO_RESULT.biblionumber %]
+                In online catalog: [% OPACBaseURL %]/cgi-bin/koha/opac-detail.pl?biblionumber=[% BIBLIO_RESULT.biblionumber %]
             </p>
             [% END %]
             [% IF ( BIBLIO_RESULT.ITEM_RESULTS.size ) %]
             <p>Items:
             <ul>
                 [% FOREACH ITEM_RESULT IN BIBLIO_RESULT.ITEM_RESULTS %]<li>
-                    [% ITEM_RESULT.branchname.raw %]
-                    [% ITEM_RESULT.location.raw %]
-                    [% IF ITEM_RESULT.itemcallnumber %]([% ITEM_RESULT.itemcallnumber.raw %])[% END %]
-                    [% ITEM_RESULT.barcode.raw %]
+                    [% ITEM_RESULT.branchname %]
+                    [% ITEM_RESULT.location %]
+                    [% IF ITEM_RESULT.itemcallnumber %]([% ITEM_RESULT.itemcallnumber %])[% END %]
+                    [% ITEM_RESULT.barcode %]
                 </li>[% END %]
             </ul>
             </p>
index 4b0c470..1c61305 100644 (file)
@@ -46,7 +46,7 @@
     <span class="Z3988" title="[% ocoins %]"></span>
     [% END %]
          <div id="catalogue_ISBDdetail">
-          [% ISBD.raw %]
+                 [% ISBD %]
          </div>
        </div>
       </div>
index 139e75a..4c0c115 100644 (file)
@@ -38,7 +38,7 @@ function Changefwk(FwkList) {
   [% IF ( unknownbiblionumber ) %]
     Unknown record
   [% ELSE %]
-    MARC Details for <i>[% bibliotitle %]</i>
+    MARC Details for <i>[% bibliotitle |html %]</i>
   [% END %]
 </div>
 
@@ -53,7 +53,7 @@ function Changefwk(FwkList) {
 [% INCLUDE 'cat-toolbar.inc' %]
 
 [% UNLESS ( popup ) %]
-    <h1>MARC biblio : [% biblionumber %]  ( [% bibliotitle %] )</h1>
+    <h1>MARC biblio : [% biblionumber %]  ( [% bibliotitle |html %] )</h1>
 
 
 [% END %]
@@ -90,10 +90,10 @@ function Changefwk(FwkList) {
                     <span class="subfield-label">&nbsp;
                     [% UNLESS ( subfiel.hide_marc ) %]<span class="subfield-code">[% subfiel.marc_subfield %]</span>[% END %]
                     <span class="desc" title="[% subfiel.long_desc %]">[% subfiel.short_desc %]</span></span>
-                    [% IF ( subfiel.is_url ) %]<a href="[% subfiel.marc_value %]">[% subfiel.marc_value %]</a>[% ELSE %][% subfiel.marc_value %][% END %]
+                    [% IF ( subfiel.is_url ) %]<a href="[% subfiel.marc_value %]">[% subfiel.marc_value |html %]</a>[% ELSE %][% subfiel.marc_value |html %][% END %]
                     [% IF ( subfiel.link ) %]
                         <a href="/cgi-bin/koha/catalogue/search.pl?op=do_search&amp;idx=[% subfiel.link %],phr&amp;type=intranet&amp;q=[% subfiel.marc_value |url %]">
-                            <img border="0" src="[% interface %]/[% theme %]/img/filefind.png" height="15" title="Search on [% subfiel.marc_value %]" alt="Search on [% subfiel.marc_value %]" />
+                            <img border="0" src="[% interface %]/[% theme %]/img/filefind.png" height="15" title="Search on [% subfiel.marc_value |html %]" alt="Search on [% subfiel.marc_value |html %]" />
                         </a>
                     [% END %]
                     [% IF ( subfiel.authority ) %]
@@ -174,7 +174,7 @@ function Changefwk(FwkList) {
                 [% FOREACH item IN item_loop %]
                     <tr>
                         [% FOREACH sf_code IN item_subfield_codes %]
-                            <td>[% item.$sf_code.raw %]</td>
+                            <td>[% item.$sf_code %]</td>
                         [% END %]
                     </tr>
                 [% END %]
index 5cb1cc3..e46428a 100644 (file)
@@ -22,7 +22,7 @@
   [% IF ( unknownbiblionumber ) %]
     Unknown record
   [% ELSE %]
-    Details for [% title %] [% FOREACH subtitl IN subtitle %] [% subtitl.subfield %][% END %]
+    Details for [% title |html %] [% FOREACH subtitl IN subtitle %] [% subtitl.subfield %][% END %]
   [% END %]
 </title>
 [% INCLUDE 'doc-head-close.inc' %]<script type="text/JavaScript">
@@ -317,7 +317,7 @@ function verify_images() {
   [% IF ( unknownbiblionumber ) %]
     Unknown record
   [% ELSE %]
-    Details for <i>[% title %]  [% FOREACH subtitl IN subtitle %] [% subtitl.subfield %][% END %]</i>
+    Details for <i>[% title |html %]  [% FOREACH subtitl IN subtitle %] [% subtitl.subfield %][% END %]</i>
   [% END %]
 </div>
 
@@ -355,7 +355,7 @@ function verify_images() {
     [% END %]
 
     [% IF ( XSLTDetailsDisplay ) %]
-        [% XSLTBloc.raw %]
+        [% XSLTBloc %]
 
         [% IF shelves.count %]
             <span class="results_summary"><span class="label">Lists that include this title: </span>
@@ -369,9 +369,9 @@ function verify_images() {
                 <span class="results_summary"><span class="label">Tags:</span>
                     [% FOREACH TagLoo IN TagLoop %]
                         [% IF ( CAN_user_tools_moderate_tags ) %]
-                        <a href="/cgi-bin/koha/tags/list.pl?tag=[% TagLoo.term |url %]">[% TagLoo.term %]</a>
+                        <a href="/cgi-bin/koha/tags/list.pl?tag=[% TagLoo.term |url %]">[% TagLoo.term |html %]</a>
                         [% ELSE %]
-                        [% TagLoo.term %]
+                        [% TagLoo.term |html %]
                         [% END %]
                         <span class="weight">([% TagLoo.weight_total %])</span>[% IF ( loop.last ) %][% ELSE %], [% END %]
                     [% END %]
@@ -394,12 +394,12 @@ function verify_images() {
         [% END %]
     [% ELSE %]
 
-    <h3>[% title %]</h3>
+    <h3>[% title |html %]</h3>
     [% FOREACH subtitl IN subtitle %]
        <h4>[% subtitl.subfield %]</h4>
     [% END %]
             [% UNLESS ( item_level_itypes ) %]<img src="[% imageurl %]" alt="[% translated_description %]" title="[% translated_description %]">[% END %]
-            [% IF ( unititle ) %]<p>[% unititle %]</p>[% END %]
+            [% IF ( unititle ) %]<p>[% unititle |html %]</p>[% END %]
             [% IF ( author ) %]<p>By <a href="/cgi-bin/koha/catalogue/search.pl?q=au:[% author |url %]">[% author %]</a></p>[% END %]
         <ul>
         [% IF ( MARCAUTHORS ) %]
@@ -421,7 +421,7 @@ function verify_images() {
         [% IF ( publishercode ) %]
     <li><strong>Published by:</strong>
         <a href="/cgi-bin/koha/catalogue/search.pl?q=pb:[% publishercode |url %]">
-            [% publishercode %]
+            [% publishercode |html %]
         </a> [% IF ( place ) %]([% place %])[% END %] [% IF ( publicationyear ) %], [% publicationyear %][% END %] [% IF ( editionstatement ) %][% editionstatement %][% END %] [% IF ( editionresponsability ) %][% editionresponsability %][% END %]
     </li>
     [% END %]
@@ -490,7 +490,7 @@ function verify_images() {
             <li><strong>Subjects:</strong> 
             <ul>
                 [% FOREACH MARCSUBJCT IN MARCSUBJCTS %]
-                <li>[% FOREACH MARCSUBJECT_SUBFIELDS_LOO IN MARCSUBJCT.MARCSUBJECT_SUBFIELDS_LOOP %] [% MARCSUBJECT_SUBFIELDS_LOO.separator %] <a title="‡[% MARCSUBJECT_SUBFIELDS_LOO.code %] [% MARCSUBJECT_SUBFIELDS_LOO.value %]" href="/cgi-bin/koha/catalogue/search.pl?q=[% FOREACH link_loo IN MARCSUBJECT_SUBFIELDS_LOO.link_loop %][% link_loo.operator |url %][% link_loo.limit %]:[% link_loo.link |url %][% END %]">[% MARCSUBJECT_SUBFIELDS_LOO.value %]</a>[% END %]</li>
+                <li>[% FOREACH MARCSUBJECT_SUBFIELDS_LOO IN MARCSUBJCT.MARCSUBJECT_SUBFIELDS_LOOP %] [% MARCSUBJECT_SUBFIELDS_LOO.separator %] <a title="‡[% MARCSUBJECT_SUBFIELDS_LOO.code %] [% MARCSUBJECT_SUBFIELDS_LOO.value %]" href="/cgi-bin/koha/catalogue/search.pl?q=[% FOREACH link_loo IN MARCSUBJECT_SUBFIELDS_LOO.link_loop %][% link_loo.operator |url %][% link_loo.limit %]:[% link_loo.link |url %][% END %]">[% MARCSUBJECT_SUBFIELDS_LOO.value |html %]</a>[% END %]</li>
                 [% END %]
                 </ul>
             </li>
@@ -528,9 +528,9 @@ function verify_images() {
                     [% FOREACH TagLoo IN TagLoop %]
                         <li>
                         [% IF ( CAN_user_tools_moderate_tags ) %]
-                        <a href="/cgi-bin/koha/tags/list.pl?tag=[% TagLoo.term |url %]">[% TagLoo.term %]</a>
+                        <a href="/cgi-bin/koha/tags/list.pl?tag=[% TagLoo.term |url %]">[% TagLoo.term |html %]</a>
                         [% ELSE %]
-                        [% TagLoo.term %]
+                        [% TagLoo.term |html %]
                         [% END %]
                         <span class="weight">([% TagLoo.weight_total %])</span>[% IF ( loop.last ) %][% ELSE %], [% END %]</li>
                     [% END %]
@@ -989,7 +989,7 @@ function verify_images() {
 <table>
 [% FOREACH XISBN IN XISBNS %]<tr>[% IF ( AmazonCoverImages ) %]<td><a href="http://www.amazon.com/gp/reader/[% XISBN.normalized_isbn %]/ref=sib_dp_pt/002-7879865-0184864#reader-link"><img src="https://images-na.ssl-images-amazon.com/images/P/[% XISBN.normalized_isbn %].01._AA75_PU_PU-5_.jpg" /></a></td>[% END %]
 [% UNLESS ( item_level_itypes ) %]<td>[% IF ( noItemTypeImages ) %][% XISBN.description %][% ELSE %]<img src="[% XISBN.imageurl %]" alt="[% XISBN.description %]" title="[% XISBN.description %]">[% END %]</td>[% END %]
-<td><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% XISBN.biblionumber %]">[% XISBN.title %]</a> by [% XISBN.author %] &copy;[% XISBN.copyrightdate %]
+<td><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% XISBN.biblionumber %]">[% XISBN.title |html %]</a> by [% XISBN.author %] &copy;[% XISBN.copyrightdate %]
   [% IF ( XISBN.publishercode ) %]
 [% XISBN.publishercode %] [% IF ( XISBN.place ) %]([% XISBN.place %])[% END %] [% IF ( XISBN.publicationyear ) %], [% XISBN.publicationyear %][% END %] [% IF ( XISBN.editionstatement ) %][% XISBN.editionstatement %][% END %] [% IF ( XISBN.editionresponsability ) %][% XISBN.editionresponsability %][% END %]
     [% END %]
index fdb59ba..60674d0 100644 (file)
@@ -1,5 +1,5 @@
 [% INCLUDE 'doc-head-open.inc' %]
-<title>Koha &rsaquo; Catalog &rsaquo; Details for [% biblio.title %] [% FOREACH subtitl IN subtitle %] [% subtitl.subfield %][% END %]</title>
+<title>Koha &rsaquo; Catalog &rsaquo; Details for [% biblio.title |html %] [% FOREACH subtitl IN subtitle %] [% subtitl.subfield %][% END %]</title>
 [% INCLUDE 'doc-head-close.inc' %]
 [% IF ( LocalCoverImages == 1 ) %]
 <script type="text/JavaScript">
@@ -50,7 +50,7 @@ img.thumbnail {
 [% INCLUDE 'header.inc' %]
 [% INCLUDE 'cat-search.inc' %]
 
-<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/catalogue/search.pl">Catalog</a>  &rsaquo; Images for <i>[% biblio.title %]  [% FOREACH subtitl IN subtitle %] [% subtitl.subfield %][% END %]</i></div>
+<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/catalogue/search.pl">Catalog</a>  &rsaquo; Images for <i>[% biblio.title |html %]  [% FOREACH subtitl IN subtitle %] [% subtitl.subfield %][% END %]</i></div>
 
 <div id="doc3" class="yui-t1">
 
@@ -61,7 +61,7 @@ img.thumbnail {
 
 [% INCLUDE 'cat-toolbar.inc' %]
 
-<h3>Images for <i>[% biblio.title %]</i></h3>
+<h3>Images for <i>[% biblio.title |html %]</i></h3>
 <h4>[% biblio.author %]</h4>
 
 [% IF ( LocalCoverImages == 1 ) %]
index eb1a8f7..89531f4 100644 (file)
@@ -1,7 +1,7 @@
 [% USE Koha %]
 [% USE KohaDates %]
 [% INCLUDE 'doc-head-open.inc' %]
-<title>Koha &rsaquo; Catalog &rsaquo; Checkout history for [% title %]</title>
+<title>Koha &rsaquo; Catalog &rsaquo; Checkout history for [% title |html %]</title>
 [% INCLUDE 'doc-head-close.inc' %]
 <link rel="stylesheet" href="[% themelang %]/css/datatables.css" />
 [% INCLUDE 'datatables.inc' %]
@@ -22,7 +22,7 @@ $(document).ready(function() {
 [% INCLUDE 'header.inc' %]
 [% INCLUDE 'cat-search.inc' %]
 
-<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/catalogue/search.pl">Catalog</a>  &rsaquo; Checkout history for <i>[% title %]</i></div>
+<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/catalogue/search.pl">Catalog</a>  &rsaquo; Checkout history for <i>[% title |html %]</i></div>
 
 <div id="doc3" class="yui-t2">
 
@@ -30,7 +30,7 @@ $(document).ready(function() {
        <div id="yui-main">
        <div class="yui-b">
 
-<h1>Checkout history for [% title %]</h1>
+<h1>Checkout history for [% title |html %]</h1>
 [% IF ( author ) %]<h3>by [% author %]</h3>[% END %]
 
 <div class="searchresults">
@@ -91,7 +91,7 @@ $(document).ready(function() {
                </table>
     [% ELSE %]
         <div class="dialog message"><p>
-        <b>[% title %][% IF ( author ) %], by [% author %][% END %]</b> has never been checked out.</p></div>
+        <b>[% title |html %][% IF ( author ) %], by [% author %][% END %]</b> has never been checked out.</p></div>
 
     [% END %]
 </div>
index 15a74e3..bc1ffb9 100644 (file)
           [% END %]
 
           <div id="pagination-bar">
-            [% pagination_bar.raw %]
+            [% pagination_bar %]
           </div>
 
         [% END %]
index 801460e..d3caf16 100644 (file)
@@ -20,7 +20,7 @@
 [% INCLUDE 'header.inc' %]
 [% INCLUDE 'cat-search.inc' %]
 
-<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/catalogue/search.pl">Catalog</a>  &rsaquo; Item details for <i>[% title %] [% FOREACH subtitl IN subtitle %] [% subtitl.subfield %][% END %]</i></div>
+<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/catalogue/search.pl">Catalog</a>  &rsaquo; Item details for <i>[% title |html %] [% FOREACH subtitl IN subtitle %] [% subtitl.subfield|html %][% END %]</i></div>
 
 <div id="doc3" class="yui-t2">
 
@@ -31,8 +31,8 @@
 
 <div id="catalogue_detail_biblio">
 
-    <h2>[% title %]</h2>
-    [% IF ( subtitle ) %]<h4>[% FOREACH subtitl IN subtitle %] [% subtitl.subfield %][% END %]</h4>[% END %]
+    <h2>[% title |html %]</h2>
+    [% IF ( subtitle ) %]<h4>[% FOREACH subtitl IN subtitle %] [% subtitl.subfield|html %][% END %]</h4>[% END %]
     [% IF ( author ) %]<h4>by [% author %]</h4>[% END %]
     <ol class="bibliodetails">
         <li><span class="label">Biblionumber:</span> [% biblionumber %]&nbsp;</li>
@@ -41,7 +41,7 @@
         [% END %]
         [% IF ( rentalcharge ) %]<li><span class="label">Rental charge:</span>[% rentalcharge %]&nbsp;</li>[% END %]
         <li><span class="label">ISBN:</span> [% isbn %]&nbsp;</li>
-        <li><span class="label">Publisher:</span>[% place %] [% publishercode %] [% publicationyear %]&nbsp;</li>
+        <li><span class="label">Publisher:</span>[% place %] [% publishercode |html %] [% publicationyear %]&nbsp;</li>
         [% IF ( volumeddesc ) %]<li><span class="label">Volume:</span> [% volumeddesc %]</li>[% END %]
         <li><span class="label">Physical details:</span> [% pages %] [% illus %] [% size %]&nbsp;</li>
         [% IF ( bnotes ) %]<li><span class="label">Notes:</span> [% bnotes %]</li>[% END %]
index c6348e4..65f35f1 100644 (file)
@@ -1,6 +1,6 @@
 [% USE Koha %]
 [% INCLUDE 'doc-head-open.inc' %]
-<title>Koha &rsaquo; Catalog &rsaquo; [% IF ( searchdesc ) %]Results of search [% IF ( query_desc ) %]for '[% query_desc %]'[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s):&nbsp;'[% limit_desc %]'[% END %][% ELSE %]You did not specify any search criteria[% END %]</title>
+<title>Koha &rsaquo; Catalog &rsaquo; [% IF ( searchdesc ) %]Results of search [% IF ( query_desc ) %]for '[% query_desc | html %]'[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s):&nbsp;'[% limit_desc | html %]'[% END %][% ELSE %]You did not specify any search criteria[% END %]</title>
 [% INCLUDE 'doc-head-close.inc' %]
 [% INCLUDE 'browser-strings.inc' %]
 [% IF BiblioDefaultViewmarc %]
@@ -108,7 +108,7 @@ $('#sort_by').change(function() {
                 [% SET number_of_private_shelves = 0 %]
                 [% FOREACH s IN add_to_some_private_shelves %]
                     [% IF shelfnumber != s.shelfnumber %]
-                        param1 += "<option id=\"s[% s.shelfnumber %]\" value=\"addtolist\">[% s.shelfname %]<\/option>";
+                        param1 += "<option id=\"s[% s.shelfnumber %]\" value=\"addtolist\">[% s.shelfname |html %]<\/option>";
                         [% SET number_of_private_shelves = number_of_private_shelves + 1 %]
                         [% IF number_of_private_shelves == 10 %][% LAST %][% END %]
                     [% END %]
@@ -120,7 +120,7 @@ $('#sort_by').change(function() {
                 [% SET number_of_public_shelves = 0 %]
                 [% FOREACH s IN add_to_some_public_shelves %]
                     [% IF shelfnumber != s.shelfnumber %]
-                        param1 += "<option id=\"s[% s.shelfnumber %]\" value=\"addtolist\">[% s.shelfname %]<\/option>";
+                        param1 += "<option id=\"s[% s.shelfnumber %]\" value=\"addtolist\">[% s.shelfname |html %]<\/option>";
                         [% SET number_of_public_shelves = number_of_public_shelves + 1 %]
                         [% IF number_of_public_shelves == 10 %][% LAST %][% END %]
                     [% END %]
@@ -290,7 +290,7 @@ var holdForPatron = function () {
 <div id="breadcrumbs">
          <a href="/cgi-bin/koha/mainpage.pl">Home</a>
 &rsaquo; <a href="/cgi-bin/koha/catalogue/search.pl">Catalog</a>
-&rsaquo; Search [% IF ( query_desc ) %]for '[% query_desc %]'[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s):&nbsp;'[% limit_desc %]'[% END %]
+&rsaquo; Search [% IF ( query_desc ) %]for '[% query_desc |html %]'[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s):&nbsp;'[% limit_desc | html %]'[% END %]
 </div>
 
 <div id="doc3" class="yui-t1">
@@ -320,10 +320,10 @@ var holdForPatron = function () {
             <form action="/cgi-bin/koha/catalogue/search.pl" method="get" id="sortbyform">
                 [% IF ( searchdesc ) %]
                     [% FOREACH QUERY_INPUT IN QUERY_INPUTS %]
-                    <input type="hidden" name="[% QUERY_INPUT.input_name %]" value="[% QUERY_INPUT.input_value %]"/>
+                    <input type="hidden" name="[% QUERY_INPUT.input_name |html %]" value="[% QUERY_INPUT.input_value |html %]"/>
                     [% END %]
                     [% FOREACH LIMIT_INPUT IN LIMIT_INPUTS %]
-                    <input type="hidden" name="[% LIMIT_INPUT.input_name %]" value="[% LIMIT_INPUT.input_value %]"/>
+                    <input type="hidden" name="[% LIMIT_INPUT.input_name |html %]" value="[% LIMIT_INPUT.input_value |html %]"/>
                     [% END %]
                 [% END %]
                 <!-- RE-SORT START -->
@@ -335,7 +335,7 @@ var holdForPatron = function () {
                 <!-- RESORT END -->
             </form>
             <h3>
-                [% total %] result(s) found [% IF ( query_desc ) %]for <span style="font-weight: bold;">'[% query_desc %]'</span>[% END %][% IF limit_desc  %]&nbsp;with limit(s): <span style="font-weight: bold;">'[% limit_desc %]'</span>[% END %][% IF ( LibraryName ) %] in [% LibraryName %] Catalog[% END %].<br />&nbsp;
+                [% total %] result(s) found [% IF ( query_desc ) %]for <span style="font-weight: bold;">'[% query_desc |html %]'</span>[% END %][% IF limit_desc  %]&nbsp;with limit(s): <span style="font-weight: bold;">'[% limit_desc | html %]'</span>[% END %][% IF ( LibraryName ) %] in [% LibraryName %] Catalog[% END %].<br />&nbsp;
             </h3>
             <div id="selection_ops" class="cartlist" style="display:none">
                 <a href="#" onclick="selectAll(); return false;">Select all</a>
@@ -376,7 +376,7 @@ var holdForPatron = function () {
             <h3>No results found</h3>
         [% IF ( searchdesc ) %]
             <p>
-                No results match your search [% IF ( query_desc ) %]for <span style="font-weight: bold;">'[% query_desc %]'</span>[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s): <span style="font-weight: bold;">'[% limit_desc %]'</span>[% END %][% IF ( LibraryName ) %] in [% LibraryName %] Catalog[% END %].
+                No results match your search [% IF ( query_desc ) %]for <span style="font-weight: bold;">'[% query_desc |html %]'</span>[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s): <span style="font-weight: bold;">'[% limit_desc | html %]'</span>[% END %][% IF ( LibraryName ) %] in [% LibraryName %] Catalog[% END %].
             </p>
         [% ELSE %]
             <p>You did not specify any search criteria.</p>
@@ -442,7 +442,7 @@ var holdForPatron = function () {
                 [% FOREACH SEARCH_RESULT IN SEARCH_RESULTS %]
                     [% IF ( loop.odd ) %]<tr>[% ELSE %]<tr class="highlight">[% END %]
                         <td>
-                            <a href="/cgi-bin/koha/catalogue/search.pl?idx=[% SEARCH_RESULT.scan_index_to_use %]&amp;q=[% SEARCH_RESULT.scan_use |url %]&quot;[% SEARCH_RESULT.title %]&quot;">[% SEARCH_RESULT.title %]</a>
+                            <a href="/cgi-bin/koha/catalogue/search.pl?idx=[% SEARCH_RESULT.scan_index_to_use %]&amp;q=[% SEARCH_RESULT.scan_use |url %]&quot;[% SEARCH_RESULT.title %]&quot;">[% SEARCH_RESULT.title |html %]</a>
                         </td>
                         <td>
                             [% SEARCH_RESULT.author %]
@@ -457,10 +457,10 @@ var holdForPatron = function () {
                 <form action="/cgi-bin/koha/catalogue/search.pl" method="get" name="bookbag_form" id="bookbag_form">
                 [% IF ( searchdesc ) %]
                 [% FOREACH QUERY_INPUT IN QUERY_INPUTS %]
-                <input type="hidden" name="[% QUERY_INPUT.input_name %]" value="[% QUERY_INPUT.input_value %]"/>
+                <input type="hidden" name="[% QUERY_INPUT.input_name |html %]" value="[% QUERY_INPUT.input_value |html %]"/>
                 [% END %]
                 [% FOREACH LIMIT_INPUT IN LIMIT_INPUTS %]
-                <input type="hidden" name="[% LIMIT_INPUT.input_name %]" value="[% LIMIT_INPUT.input_value %]"/>
+                <input type="hidden" name="[% LIMIT_INPUT.input_name |html %]" value="[% LIMIT_INPUT.input_value |html %]"/>
                 [% END %]
                 [% END %]
 
@@ -500,13 +500,13 @@ var holdForPatron = function () {
                             <td>
                            [% IF ( SEARCH_RESULT.XSLTResultsRecord ) %]
                 [% SEARCH_RESULT.result_number %].
-                [% SEARCH_RESULT.XSLTResultsRecord.raw %]
+                               [% SEARCH_RESULT.XSLTResultsRecord %]
                            [% ELSE %]
                                 <p>[% SEARCH_RESULT.result_number %].
                                  [% biblionumber = SEARCH_RESULT.biblionumber %]
 
                                [% INCLUDE 'biblio-default-view.inc' %]
-                                            <b>[% IF ( SEARCH_RESULT.title ) %][% SEARCH_RESULT.title %][% ELSE %]No title[% END %]</b>
+                                            <b>[% IF ( SEARCH_RESULT.title ) %][% SEARCH_RESULT.title |html %][% ELSE %]No title[% END %]</b>
                                             </a>
                                         [% FOREACH subtitl IN SEARCH_RESULT.subtitle %], [% subtitl.subfield %][% END %]
                                         [% IF ( SEARCH_RESULT.seriestitle ) %][% SEARCH_RESULT.seriestitle %][% END %]
@@ -692,7 +692,7 @@ var holdForPatron = function () {
     [% IF ( outer_sup_results_loo.inner_sup_results_loop ) %]
         [% outer_sup_results_loo.servername %]
         [% FOREACH inner_sup_results_loo IN outer_sup_results_loo.inner_sup_results_loop %]
-        <div><a href="/cgi-bin/koha/catalogue/search.pl?[% inner_sup_results_loo.query_cgi %][% inner_sup_results_loo.limit_cgi %][% inner_sup_results_loo.sort_by %][% inner_sup_results_loo.link %]">[% inner_sup_results_loo.title %]</a></div>
+        <div><a href="/cgi-bin/koha/catalogue/search.pl?[% inner_sup_results_loo.query_cgi %][% inner_sup_results_loo.limit_cgi |html %][% inner_sup_results_loo.sort_by %][% inner_sup_results_loo.link %]">[% inner_sup_results_loo.title |html %]</a></div>
         [% END %]
     [% END %]
 <!-- </div> -->
index 044bc0e..48310c1 100644 (file)
@@ -120,7 +120,7 @@ function enableCheckboxActions(form){
                   <tr>
                     <td><input type="checkbox" name="id" value="[% s.id %]" /></td>
                     <td><span title="[% s.time %]">[% s.time |$KohaDates with_hours => 1 %]</span></td>
-                    <td><a href="/cgi-bin/koha/catalogue/search.pl?[% s.query_cgi %]">[% s.query_desc %]</a></td>
+                    <td><a href="/cgi-bin/koha/catalogue/search.pl?[% s.query_cgi |html %]">[% s.query_desc |html %]</a></td>
                     <td>[% s.total %]</td>
                   </tr>
                 [% END %]
@@ -156,7 +156,7 @@ function enableCheckboxActions(form){
                   <tr>
                     <td><input type="checkbox" name="id" value="[% s.id %]" /></td>
                     <td><span title="[% s.time %]">[% s.time |$KohaDates with_hours => 1 %]</span></td>
-                    <td><a href="/cgi-bin/koha/catalogue/search.pl?[% s.query_cgi %]">[% s.query_desc %]</a></td>
+                    <td><a href="/cgi-bin/koha/catalogue/search.pl?[% s.query_cgi |html %]">[% s.query_desc |html %]</a></td>
                     <td>[% s.total %]</td>
                   </tr>
                 [% END %]
@@ -198,7 +198,7 @@ function enableCheckboxActions(form){
                   <tr>
                     <td><input type="checkbox" name="id" value="[% s.id %]" /></td>
                     <td><span title="[% s.time %]">[% s.time |$KohaDates with_hours => 1 %]</span></td>
-                    <td><a href="/cgi-bin/koha/authorities/authorities-home.pl?[% s.query_cgi %]">[% s.query_desc %]</a></td>
+                    <td><a href="/cgi-bin/koha/authorities/authorities-home.pl?[% s.query_cgi |html %]">[% s.query_desc |html %]</a></td>
                     <td>[% s.total %]</td>
                   </tr>
                 [% END %]
@@ -234,7 +234,7 @@ function enableCheckboxActions(form){
                   <tr>
                     <td><input type="checkbox" name="id" value="[% s.id %]" /></td>
                     <td><span title="[% s.time %]">[% s.time |$KohaDates with_hours => 1 %]</span></td>
-                    <td><a href="/cgi-bin/koha/authorities/authorities-home.pl?[% s.query_cgi %]">[% s.query_desc %]</a></td>
+                    <td><a href="/cgi-bin/koha/authorities/authorities-home.pl?[% s.query_cgi |html %]">[% s.query_desc |html %]</a></td>
                     <td>[% s.total %]</td>
                   </tr>
                 [% END %]
index ab1fea4..a6b23ad 100644 (file)
@@ -28,7 +28,7 @@
 [% FOREACH SEARCH_RESULT IN SEARCH_RESULTS %]
        [% IF ( SEARCH_RESULT.even ) %]<tr class="highlight">[% ELSE %]<tr>[% END %]
                <td>
-            <a href="/cgi-bin/koha/search.pl?type=[% IF ( SEARCH_RESULT.opac ) %]opac[% ELSE %]intra[% END %]&amp;subjectitems=[% SEARCH_RESULT.subject2 %]">[% SEARCH_RESULT.subject %]</a>
+                       <a href="/cgi-bin/koha/search.pl?type=[% IF ( SEARCH_RESULT.opac ) %]opac[% ELSE %]intra[% END %]&amp;subjectitems=[% SEARCH_RESULT.subject2 |html %]">[% SEARCH_RESULT.subject %]</a>
                </td>
        </tr>
 [% END %]
index 4e0ac0c..2b6b327 100644 (file)
@@ -1,6 +1,6 @@
 [% USE Koha %]
 [% INCLUDE 'doc-head-open.inc' %]
-<title>Koha &rsaquo; Cataloging &rsaquo; [% IF ( biblionumber ) %]Editing [% title %] (Record number [% biblionumber %])[% ELSE %]Add MARC record[% END %]</title>
+<title>Koha &rsaquo; Cataloging &rsaquo; [% IF ( biblionumber ) %]Editing [% title |html %] (Record number [% biblionumber %])[% ELSE %]Add MARC record[% END %]</title>
 [% INCLUDE 'doc-head-close.inc' %]
 <script type="text/javascript" src="[% interface %]/lib/jquery/plugins/jquery.fixFloat.js"></script>
 <script type="text/javascript" src="[% themelang %]/js/cataloging.js"></script>
@@ -253,7 +253,7 @@ function AreMandatoriesNotOk(){
                [% FOREACH subfield_loo IN innerloo.subfield_loop %]
                        [% IF ( subfield_loo.mandatory ) %]mandatories.push("[% subfield_loo.id %]");
                        tab.push("[% BIG_LOO.number %]");
-                    label.push("[% subfield_loo.marc_lib.raw %]");
+                       label.push("[% subfield_loo.marc_lib %]");
                 [% END %]
             [% END %]
         [% END %]
@@ -401,7 +401,7 @@ function Changefwk(FwkList) {
 
 [% INCLUDE 'header.inc' %]
 
-<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/cataloguing/addbooks.pl">Cataloging</a>  &rsaquo; [% IF ( biblionumber ) %]Editing <em>[% title %]</em> (Record number [% biblionumber %])[% ELSE %]Add MARC record[% END %]</div>
+<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/cataloguing/addbooks.pl">Cataloging</a>  &rsaquo; [% IF ( biblionumber ) %]Editing <em>[% title |html %]</em> (Record number [% biblionumber %])[% ELSE %]Add MARC record[% END %]</div>
 
 <div id="doc" class="yui-t7">
 
@@ -410,7 +410,7 @@ function Changefwk(FwkList) {
         <div class="yui-g">
 
 <h1>
-[% IF ( biblionumber ) %]Editing <em>[% title %]</em> (Record number [% biblionumber %])
+[% IF ( biblionumber ) %]Editing <em>[% title |html %]</em> (Record number [% biblionumber %])
 [% ELSE %]Add MARC record [% IF (circborrowernumber) %]<em>(fast cataloging)</em>[% END %]
 [% END %]
 </h1>
@@ -445,7 +445,7 @@ function Changefwk(FwkList) {
 [% IF ( done ) %]
     <script type="text/javascript">
         opener.document.forms['f'].biblionumber.value=[% biblionumber %];
-        opener.document.forms['f'].title.value='[% title %]';
+        opener.document.forms['f'].title.value='[% title |html %]';
         window.close();
     </script>
 [% ELSE %]
@@ -619,7 +619,7 @@ function Changefwk(FwkList) {
                         <img class="buttonUp" src="[% interface %]/[% theme %]/img/up.png" onclick="upSubfield('subfield[% subfield_loo.tag %][% subfield_loo.subfield %][% subfield_loo.random %]')" alt="Move Up" title="Move Up" />
                     [% END %]
                         <input type="text"
-                            title="[% subfield_loo.marc_lib.raw %]"
+                            title="[% subfield_loo.marc_lib %]"
                             style=" [% IF ( subfield_loo.fixedfield ) %]display:none; [% END %]border:0;"
                             name="tag_[% subfield_loo.tag %]_code_[% subfield_loo.subfield %]_[% subfield_loo.index %]_[% subfield_loo.index_subfield %]"
                             value="[% subfield_loo.subfield %]"
@@ -631,7 +631,7 @@ function Changefwk(FwkList) {
 
                 [% UNLESS advancedMARCEditor %]
                     [% IF ( subfield_loo.mandatory ) %]<span class="subfield subfield_mandatory">[% ELSE %]<span class="subfield">[% END %]
-                        [% subfield_loo.marc_lib.raw %]
+                        [% subfield_loo.marc_lib %]
                         [% IF ( subfield_loo.mandatory ) %]<span class="mandatory_marker" title="This field is mandatory">*</span>[% END %]
                     </span>
                     </label>
@@ -656,7 +656,7 @@ function Changefwk(FwkList) {
                             <a href="#" id="buttonDot_[% mv.id %]" class="buttonDot tag_editor framework_plugin" tabindex="1" title="Tag editor">Tag editor</a>
                         [% END %]
                     </span>
-                    [% mv.javascript.raw %]
+                    [% mv.javascript %]
                 [% ELSIF ( mv.type == 'hidden' ) %]
                     <input tabindex="1" type="hidden" id="[%- mv.id -%]" name="[%- mv.name -%]" size="[%- mv.size -%]" maxlength="[%- mv.maxlength -%]" value="[%- mv.value -%]" />
                 [% ELSIF ( mv.type == 'textarea' ) %]
index c16796b..1a60e7e 100644 (file)
     [% total %] result(s) found in catalog,
     <a href="#searchresult-breeding">[% breeding_count %] result(s) found in reservoir</a>
 </div>
-<div class="pages">[% pagination_bar.raw %]</div>
+<div class="pages">[% pagination_bar %]</div>
 <div class="searchresults">
     <table>
         <tr>
             <td><input type="checkbox" class="selection" id="bib[% resultsloo.biblionumber %]" name="biblionumber" value="[% resultsloo.biblionumber %]" /></td>
             <td>
                 <p>
-                    <a href="/cgi-bin/koha/catalogue/MARCdetail.pl?biblionumber=[% resultsloo.biblionumber %]">[% resultsloo.title %]</a>
+                    <a href="/cgi-bin/koha/catalogue/MARCdetail.pl?biblionumber=[% resultsloo.biblionumber %]">[% resultsloo.title |html %]</a>
                 [% FOREACH subtitl IN resultsloo.subtitle %][% subtitl.subfield %][% END %]</p>
                 [% IF ( resultsloo.summary ) %]
                     <p>[% resultsloo.summary %]</p>
             [% ELSE %]
                <tr class="highlight">
             [% END %]
-                <td>[% breeding_loo.title %]
+                <td>[% breeding_loo.title |html %]
                 [% breeding_loo.author %]</td>
                 <td>[% breeding_loo.isbn %]</td>
                 <td>[% breeding_loo.copyrightdate %]</td>
index 1ae550c..fd0054b 100644 (file)
@@ -1,7 +1,7 @@
 [% USE ColumnsSettings %]
 
 [% INCLUDE 'doc-head-open.inc' %]
-<title>Koha &rsaquo; Cataloging &rsaquo; [% title %] [% IF ( author ) %] by [% author %][% END %] (Record #[% biblionumber %]) &rsaquo; Items</title>
+<title>Koha &rsaquo; Cataloging &rsaquo; [% title |html %] [% IF ( author ) %] by [% author %][% END %] (Record #[% biblionumber %]) &rsaquo; Items</title>
 <link rel="stylesheet" type="text/css" href="[% themelang %]/css/datatables.css" />
 [% INCLUDE 'doc-head-close.inc' %]
 [% INCLUDE 'datatables.inc' %]
@@ -48,7 +48,7 @@ $(document).ready(function(){
                 });
             });
 
-    var columns_settings = [% ColumnsSettings.GetColumns( 'cataloguing', 'additem', 'itemst', 'json' ).raw %]
+    var columns_settings = [% ColumnsSettings.GetColumns( 'cataloguing', 'additem', 'itemst', 'json' ) %]
     // Skip the first column
     columns_settings.unshift( { cannot_be_toggled: "1" } );
 
@@ -117,7 +117,7 @@ function confirm_deletion() {
 <div id="breadcrumbs">
           <a href="/cgi-bin/koha/mainpage.pl">Home</a>
  &rsaquo; <a href="/cgi-bin/koha/cataloguing/addbooks.pl">Cataloging</a>
- &rsaquo; Edit <a href="/cgi-bin/koha/cataloguing/addbiblio.pl?biblionumber=[% biblionumber %]">[% title %] [% IF ( author ) %] by [% author %][% END %] (Record #[% biblionumber %])</a>
+ &rsaquo; Edit <a href="/cgi-bin/koha/cataloguing/addbiblio.pl?biblionumber=[% biblionumber %]">[% title |html %] [% IF ( author ) %] by [% author %][% END %] (Record #[% biblionumber %])</a>
  &rsaquo; <a href="/cgi-bin/koha/cataloguing/additem.pl?biblionumber=[% biblionumber %]">Items</a>
 </div>
 
@@ -126,7 +126,7 @@ function confirm_deletion() {
    <div id="bd">
        <div id="yui-main">
 
-<h1>Items for [% title %] [% IF ( author ) %] by [% author %][% END %] (Record #[% biblionumber %])</h1>
+<h1>Items for [% title |html %] [% IF ( author ) %] by [% author %][% END %] (Record #[% biblionumber %])</h1>
 
 [% IF ( barcode_not_unique ) %]<div class="dialog alert"><strong>Error saving item</strong>: Barcode must be unique.</div>[% END %]
 [% IF ( no_next_barcode ) %]<div class="dialog alert"><strong>Error saving items</strong>: Unable to automatically determine values for barcodes. No item has been inserted.</div>[% END %]
@@ -194,7 +194,7 @@ function confirm_deletion() {
                       </td>
                     [% END %]
                 [% FOREACH item_valu IN item_loo.item_value %]
-                    <td>[% item_valu.field %]</td>
+                    <td>[% item_valu.field |html %]</td>
                 [% END %]
                 </tr>
                 [% END %]
@@ -225,9 +225,9 @@ function confirm_deletion() {
         [% FOREACH ite IN item %]
                <li><div class="subfield_line" style="[% ite.visibility %]" id="subfield[% ite.tag %][% ite.subfield %][% ite.random %]">
                 [% IF ( ite.mandatory ) %]
-               <label class="required">[% ite.subfield %] - [% ite.marc_lib.raw %]</label>
+               <label class="required">[% ite.subfield %] - [% ite.marc_lib %]</label>
                [% ELSE %]
-               <label>[% ite.subfield %] - [% ite.marc_lib.raw %]</label>
+               <label>[% ite.subfield %] - [% ite.marc_lib %]</label>
                [% END %]
 
                 [% SET mv = ite.marc_value %]
@@ -258,7 +258,7 @@ function confirm_deletion() {
                     [% ELSE  %]
                         <a href="#" id="buttonDot_[%- mv.id -%]" class="[%- mv.class -%]" title="Tag editor">...</a>
                     [% END %]
-                    [%- mv.javascript.raw -%]
+                    [%- mv.javascript -%]
                 [% ELSIF ( mv.type == 'text' ) %]
                     <input type="text" id="[%- mv.id -%]" name="field_value" class="input_marceditor" size="50" maxlength="[%- mv.maxlength -%]" value="[%- mv.value -%]" />
                 [% ELSIF ( mv.type == 'textarea' ) %]
index 1836a78..4261554 100644 (file)
@@ -5,7 +5,7 @@
 <body id="catalog_linkitem" class="catalog">
 [% INCLUDE 'header.inc' %]
 [% INCLUDE 'cat-search.inc' %]
-<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/cataloguing/addbooks.pl">Cataloging</a>  &rsaquo; Link a host item to <i>[% bibliotitle %]</i></div>
+<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/cataloguing/addbooks.pl">Cataloging</a>  &rsaquo; Link a host item to <i>[% bibliotitle |html %]</i></div>
 <div id="doc3" class="yui-t2">
 
 [% IF ( error ) %]
@@ -20,7 +20,7 @@
     </form>
 [% ELSE %]
     [% IF ( success ) %]
-    <div class="dialog">The item has successfully been linked to <i>[% bibliotitle %]</i>.</div>
+       <div class="dialog">The item has successfully been linked to <i>[% bibliotitle |html %]</i>.</div>    
        <form action="/cgi-bin/koha/catalogue/MARCdetail.pl" method="post">
            <input type="submit" value="OK" />
            <input type="hidden" name="biblionumber" value="[% biblionumber %]" />
@@ -40,7 +40,7 @@
 
            [% IF ( missingbarcode ) %]
            <fieldset id="barcode_fieldset">
-        <label for="barcode_fieldset">Select the host item to link[% IF ( bibliotitle ) %] to <i>[% bibliotitle %]</i>[% END %]</label>
+               <label for="barcode_fieldset">Select the host item to link[% IF ( bibliotitle ) %] to <i>[% bibliotitle |html %]</i>[% END %]</label>
                    <div class="hint">Enter item barcode:</div>
                    <input type="text" name="barcode" id="barcode" class="barcode focus" size="14" /> 
            </fieldset>
index 04e4870..e998929 100644 (file)
@@ -1,11 +1,11 @@
 [% INCLUDE 'doc-head-open.inc' %]
-<title>Attach an item to [% bibliotitle %]</title>
+<title>Attach an item to [% bibliotitle |html %]</title>
 [% INCLUDE 'doc-head-close.inc' %]
 </head>
 <body id="catalog_moveitem" class="catalog">
 [% INCLUDE 'header.inc' %]
 [% INCLUDE 'cat-search.inc' %]
-<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/cataloguing/addbooks.pl">Cataloging</a>  &rsaquo; Attach an item to <i>[% bibliotitle %][% IF ( itemsloo.subtitle ) %][% itemsloo.subtitle %][% END %]</i></div>
+<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/cataloguing/addbooks.pl">Cataloging</a>  &rsaquo; Attach an item to <i>[% bibliotitle |html %][% IF ( itemsloo.subtitle ) %][% itemsloo.subtitle %][% END %]</i></div>
 <div id="doc" class="yui-t7">
 
 [% BLOCK actions %]
@@ -52,7 +52,7 @@
 
        [% ELSE %]
            [% IF ( success ) %]
-            <div class="dialog message">The item has successfully been attached to [% INCLUDE 'biblio-default-view.inc' %]<i>[% bibliotitle %]</i></a>.
+                       <div class="dialog message">The item has successfully been attached to [% INCLUDE 'biblio-default-view.inc' %]<i>[% bibliotitle |html %]</i></a>.
                        <p>
                        [% INCLUDE actions %]
                                <input type="submit" class="approve" value="OK" />
@@ -79,7 +79,7 @@
            [% END %]
 
                [% IF ( missingbarcode ) %]
-        <h3>Attach an item[% IF ( bibliotitle ) %] to <i>[% bibliotitle %]</i>[% END %]</h3>
+               <h3>Attach an item[% IF ( bibliotitle ) %] to <i>[% bibliotitle |html %]</i>[% END %]</h3>
            <fieldset id="barcode_fieldset">
                <label for="barcode">Enter the barcode of the item to attach:</label>
                    <p class="hint">The item you select will be moved to the target record.</p>
index e7755d5..9b7de75 100644 (file)
                 <tr>
                 <th>Espace\Temps</th>
                 [% FOREACH col_hd IN BIGLOO.col_hdr %]
-                    <th scope="col" id="[% col_hd.colvalue %]">  [% col_hd.collib %] <br /><input type="checkbox" name="[% col_hd.colvalue %]" onclick="check_col('[% col_hd.colvalue %]')" />
+                    <th scope="col" id="[% col_hd.colvalue %]">  [% col_hd.collib |html %] <br /><input type="checkbox" name="[% col_hd.colvalue %]" onclick="check_col('[% col_hd.colvalue %]')" />
                     </th>
                 [% END %]
                 </tr>
                 [% FOREACH line IN BIGLOO.lines %]
                 <tr>
-                    <th scope="row" id="[% line.rowvalue %]">  [% line.rowlib %] <br /><input type="checkbox" name="[% line.rowvalue %]" onclick="check_row('[% line.rowvalue %]')" />
+                    <th scope="row" id="[% line.rowvalue %]">  [% line.rowlib |html %] <br /><input type="checkbox" name="[% line.rowvalue %]" onclick="check_row('[% line.rowvalue %]')" />
                     </th>
                     [% FOREACH cell IN line.cells %]
                     <td headers="[% cell.rowvalue %] [% cell.colvalue %]">
-                    <span title="[% FOREACH lib IN cell.libs %][% lib.lib %] - [% END %]">
+                    <span title="[% FOREACH lib IN cell.libs %][% lib.lib |html %] - [% END %]">
                     [% cell.celvalue %] <br /><input type="checkbox" name="[% cell.celvalue %]" value="[% cell.celvalue %]" />
                     </span>
                     </td>
             [% FOREACH List IN BIGLOO.Lists %]
                 <h3>[% List.lib %]</h3>
                 [% FOREACH liblis IN List.liblist %]
-                <a href="#[% liblis.listvalue %]" onclick="check_multiple([% liblis.listvalue %])"> [% liblis.listlib %]</a><br />
+                <a href="#[% liblis.listvalue %]" onclick="check_multiple([% liblis.listvalue %])"> [% liblis.listlib |html %]</a><br />
                 [% END %]
             [% END %]
             [% END %]
             [% UNLESS ( BIGLOO.Table ) %]
             <!-- Listes simples :Onglets 0 et 9-->
             [% FOREACH line IN BIGLOO.lines %]
-                <h3>[% line.rowvalue %]&nbsp;-&nbsp;[% line.rowlib %]&nbsp;<input type="checkbox" name="[% line.rowvalue %]" onclick="check_row('[% line.rowvalue %]')" /></h3>
+                <h3>[% line.rowvalue |html %]&nbsp;-&nbsp;[% line.rowlib |html %]&nbsp;<input type="checkbox" name="[% line.rowvalue %]" onclick="check_row('[% line.rowvalue %]')" /></h3>
                 [% FOREACH cell IN line.cells %]
-                <p>[% cell.celvalue %]&nbsp;-&nbsp;[% FOREACH lib IN cell.libs %]
-                        [% lib.lib %] &nbsp;
+                <p>[% cell.celvalue |html %]&nbsp;-&nbsp;[% FOREACH lib IN cell.libs %]
+                        [% lib.lib |html %] &nbsp;
                     [% END %]
                     <input type="checkbox" name="[% cell.celvalue %]" value="[% cell.celvalue %]" />
                 </p>
index 159d396..ba214da 100644 (file)
                                     [% IF ( resul.even ) %]<td class="hilighted">
                                     [% ELSE %]<td>[% END %]
                                                             [% IF ( resul.MARC_ON ) %]
-                                                                    <a_class="transparent resultlist" href="/cgi-bin/koha/MARCdetail.pl?biblionumber=[% resul.biblionumber |url %]">[% resul.title %]</a>
+                                                                    <a_class="transparent resultlist" href="/cgi-bin/koha/MARCdetail.pl?biblionumber=[% resul.biblionumber |url %]">[% resul.title |html %]</a>
                                                             [% ELSE %]
-                                                                    <a_class="transparent resultlist" href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% resul.biblionumber |url %]">[% resul.title %]</a>
-                                                            [% END %]
+                                                                    <a_class="transparent resultlist" href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% resul.biblionumber |url %]">[% resul.title |html %]</a>                          [% END %]
                                                     <p>[% resul.author %]
                                                     [% IF ( resul.publishercode ) %]- [% resul.publishercode %][% END %]
                                                     [% IF ( resul.place ) %] ; [% resul.place %][% END %]
index 2aa0f3d..043e700 100644 (file)
@@ -41,7 +41,7 @@
             [% IF ( total ) %]
             <h3>Authority search results</h3>
             <div class="pages">
-                          [% pagination_bar.raw %]
+                          [% pagination_bar %]      
                         </div>[% END %]
             <p>
                 [% IF ( total ) %]
@@ -74,7 +74,7 @@
 [% END %]
 
             [% IF ( total ) %]<div class="pages">
-                          [% pagination_bar.raw %]
+                          [% pagination_bar %]      
                         </div>
             [% END %]
 <script type="text/javascript">
index a35a35a..458c199 100644 (file)
                 <option value="">All item types</option>
                                [% FOREACH itypeloo IN itypeloop %]
                                [% IF ( itypeloo.selected ) %]
-                <option value="[% itypeloo.itemtype %]" selected="selected">[% itypeloo.description %]</option>
+                <option value="[% itypeloo.itemtype %]" selected="selected">[% itypeloo.description |html %]</option>
                                [% ELSE %]
-                <option value="[% itypeloo.itemtype %]">[% itypeloo.description %]</option>
+                <option value="[% itypeloo.itemtype %]">[% itypeloo.description |html %]</option>
                                [% END %]
                                [% END %]
                                </select>
                                     [% IF ( resul.even ) %]<td class="hilighted">
                                     [% ELSE %]<td>[% END %]
                                                             [% IF ( resul.MARC_ON ) %]
-                                                                    <a class="transparent resultlist" href="/cgi-bin/koha/MARCdetail.pl?biblionumber=[% resul.biblionumber |url %]">[% resul.title %]</a>
+                                                                    <a class="transparent resultlist" href="/cgi-bin/koha/MARCdetail.pl?biblionumber=[% resul.biblionumber |url %]">[% resul.title |html %]</a>
                                                             [% ELSE %]
-                                                                    <a class="transparent resultlist" href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% resul.biblionumber |url %]">[% resul.fulltitle %]</a>[% END %]
-                                                    <p>[% resul.author %]
-                                                    [% IF ( resul.publishercode ) %]- [% resul.publishercode %][% END %]
-                                                    [% IF ( resul.place ) %] ; [% resul.place %][% END %]
-                                                    [% IF ( resul.pages ) %] - [% resul.pages %][% END %]
-                                                    [% IF ( resul.notes ) %] : [% resul.notes %][% END %]
-                                                    [% IF ( resul.item('size') ) %] ; [% resul.item('size') %][% END %]
+                                                                    <a class="transparent resultlist" href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% resul.biblionumber |url %]">[% resul.fulltitle |html %]</a>[% END %]
+                                                    <p>[% resul.author |html %]
+                                                    [% IF ( resul.publishercode ) %]- [% resul.publishercode |html %][% END %]
+                                                    [% IF ( resul.place ) %] ; [% resul.place |html %][% END %]
+                                                    [% IF ( resul.pages ) %] - [% resul.pages |html %][% END %]
+                                                    [% IF ( resul.notes ) %] : [% resul.notes |html %][% END %]
+                                                    [% IF ( resul.item('size') ) %] ; [% resul.item('size') |html %][% END %]
                                             </p>
                                        </td>
                     [% IF ( resul.even ) %]<td align="center" class="hilighted">
                     [% ELSE %]<td align="center">[% END %]
-                        [% resul.totitem %]
+                        [% resul.totitem |html %]
                                        </td>
                     [% IF ( resul.even ) %]<td class="hilighted">
                     [% ELSE %]<td>[% END %]
-                        [% resul.CN %]
+                        [% resul.CN |html %]
                                        </td>
                                        <td>
                       [% IF ( resul.biblionumber ) %]
index a35db12..4c59985 100644 (file)
@@ -33,7 +33,7 @@
                         <option value="start">starts with</option>
                         <option value="is">is exactly</option>
                     </select>
-                    <input type="text" name="value_mainstr" value="[% value_mainstr %]" />
+                    <input type="text" name="value_mainstr" value="[% value_mainstr |html %]" />
                 </li>
                 <li>
                     <label for="mainentry">Main entry</label>
@@ -45,7 +45,7 @@
                         <option value="start">starts with</option>
                         <option value="is">is exactly</option>
                     </select>
-                    <input type="text" name="value_main" value="[% value_main %]" />
+                    <input type="text" name="value_main" value="[% value_main |html %]" />
                 </li>
                 <li>
                     <label for="marclist">Anywhere</label>
@@ -57,7 +57,7 @@
                         <option value="start">starts with</option>
                         <option value="is">is exactly</option>
                     </select>
-                    <input type="text" name="value_any" value="[% value_any %]" />
+                    <input type="text" name="value_any" value="[% value_any |html %]" />
                 </li>
                 <li>
                     <label for="orderby">Sort by </label>
index 92abc8a..de1c781 100644 (file)
@@ -126,9 +126,9 @@ tr.selected { background-color : #FFFFCC; } tr.selected td { background-color :
                     <li><label for="srchany">Keyword (any): </label> <input type="text" id="srchany" name="srchany" value="" /></li>
                     <li><label for="nameany">Name (any): </label> <input type="text" id="nameany" name="nameany" value="" /></li>
                     <li><label for="authorany">Author (any): </label> <input type="text" id="authorany" name="authorany" value="" /></li>
-                    <li><label for="authorpersonal">Author (personal): </label> <input type="text" id="authorpersonal" name="authorpersonal" value="[% authorpersonal %]" /></li>
-                    <li><label for="authorcorp">Author (corporate): </label> <input type="text" id="authorcorp" name="authorcorp" value="[% authorcorp %]" /></li>
-                    <li><label for="authormeetingcon">Author (meeting/conference): </label> <input type="text" id="authormeetingcon" name="authormeetingcon" value="[% authormeetingcon %]" /></li>
+                    <li><label for="authorpersonal">Author (personal): </label> <input type="text" id="authorpersonal" name="authorpersonal" value="[% authorpersonal | html %]" /></li>
+                    <li><label for="authorcorp">Author (corporate): </label> <input type="text" id="authorcorp" name="authorcorp" value="[% authorcorp | html %]" /></li>
+                    <li><label for="authormeetingcon">Author (meeting/conference): </label> <input type="text" id="authormeetingcon" name="authormeetingcon" value="[% authormeetingcon | html %]" /></li>
                 </ol>
                 </fieldset>
             </div>
@@ -137,8 +137,8 @@ tr.selected { background-color : #FFFFCC; } tr.selected td { background-color :
                 <ol>
                     <li><label for="subject">Subject heading: </label> <input type="text" id="subject" name="subject" value="" /></li>
                     <li><label for="subjectsubdiv">Subject sub-division: </label> <input type="text" id="subjectsubdiv" name="subjectsubdiv" value="" /></li>
-                    <li><label for="title">Title (any): </label> <input type="text" id="title"  name="title" value="[% title %]" /></li>
-                    <li><label for="uniformtitle">Title (uniform): </label> <input type="text" id="uniformtitle"  name="uniformtitle" value="[% uniformtitle %]" /></li>
+                    <li><label for="title">Title (any): </label> <input type="text" id="title"  name="title" value="[% title | html %]" /></li>
+                    <li><label for="uniformtitle">Title (uniform): </label> <input type="text" id="uniformtitle"  name="uniformtitle" value="[% uniformtitle | html %]" /></li>
                 </ol>
                 <p><a id="resetZ3950Search" href="#">Clear search form</a></p>
                 </fieldset>
index 41b1283..d66c007 100644 (file)
@@ -127,7 +127,7 @@ tr.selected { background-color : #FFFFCC; } tr.selected td { background-color :
         <ol>
         <li><label for="isbn">ISBN: </label> <input type="text" id="isbn" name="isbn" value="[% isbn %]" /></li>
         <li><label for="issn">ISSN: </label> <input type="text" id="issn" name="issn" value="[% issn %]" /></li>
-        <li><label for="title">Title: </label> <input type="text" id="title"  name="title" value="[% title %]" /></li>
+        <li><label for="title">Title: </label> <input type="text" id="title"  name="title" value="[% title |html %]" /></li>
         <li><label for="author">Author: </label> <input type="text" id="author" name="author" value="[% author %]" /></li>
         <li><label for="subject">Subject heading: </label> <input type="text" id="subject" name="subject" value="" /></li>
         <li><label for="srchany">Keyword (any): </label> <input type="text" id="srchany" name="srchany" value="" /></li>
@@ -207,7 +207,7 @@ tr.selected { background-color : #FFFFCC; } tr.selected td { background-color :
 
            <tr id="row[% breeding_loo.breedingid %]">
             <td>[% breeding_loo.server %] <div class="linktools"><a href="/cgi-bin/koha/catalogue/showmarc.pl?importid=[% breeding_loo.breedingid %]" class="previewData">Preview MARC</a> <a href="/cgi-bin/koha/catalogue/showmarc.pl?viewas=card&amp;importid=[% breeding_loo.breedingid %]" class="previewData">Preview card</a> <a href="#" onclick="Import([% breeding_loo.breedingid %],[% breeding_loo.biblionumber %]); return false">Import</a><a href="#" onclick="closemenu();return false;" title="Close this menu"> X </a></div> </td>
-            <td>[% breeding_loo.title %]</td>
+            <td>[% breeding_loo.title |html %]</td>
             <td>[% breeding_loo.author %]</td>
             <td>[% breeding_loo.date %]</td>
             <td>[% breeding_loo.edition %]</td>
index 2c7e329..f7b4765 100644 (file)
@@ -1,6 +1,6 @@
 [% USE KohaDates %]
 [% INCLUDE 'doc-head-open.inc' %]
-<title>Koha &rsaquo; Circulation &rsaquo; Circulation statistics for [% title %]</title>
+<title>Koha &rsaquo; Circulation &rsaquo; Circulation statistics for [% title |html %]</title>
 [% INCLUDE 'doc-head-close.inc' %]
 <script type="text/javascript">
 $(document).ready(function(){
@@ -13,7 +13,7 @@ $(document).ready(function(){
 [% INCLUDE 'header.inc' %]
 [% INCLUDE 'circ-search.inc' %]
 
-<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/circ/circulation-home.pl">Circulation</a> &rsaquo; Circulation statistics for [% title %]</div>
+<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/circ/circulation-home.pl">Circulation</a> &rsaquo; Circulation statistics for [% title |html %]</div>
 
 <div id="doc3" class="yui-t2">
    
@@ -22,7 +22,7 @@ $(document).ready(function(){
        <div class="yui-b">
 
 <h2>
-[% title %] [% IF ( author ) %] by [% author %][% END %]</h2>
+[% title |html %] [% IF ( author ) %] by [% author |html %][% END %]</h2>
 <h3>Barcode [% barcode %]</h3>
 <table>
         <tr><th>Home library</th><th>Current library</th><th>Date arrived<br />at current library </th><th>Number of checkouts<br />since last transfer</th></tr>
index eaef667..ff3424d 100644 (file)
@@ -43,7 +43,7 @@
                         [% overduesloo.date_due %]
                     </td>
                     <td>
-                    [% INCLUDE 'biblio-default-view.inc' biblionumber = overduesloo.biblionumber %][% overduesloo.title %] [% IF ( overduesloo.subtitle ) %][% overduesloo.subtitle %][% END %]</a> [% IF ( overduesloo.author ) %] by [% overduesloo.author %][% END %]
+                    [% INCLUDE 'biblio-default-view.inc' biblionumber = overduesloo.biblionumber %][% overduesloo.title |html %] [% IF ( overduesloo.subtitle ) %][% overduesloo.subtitle %][% END %]</a> [% IF ( overduesloo.author ) %] by [% overduesloo.author %][% END %]
 
                             <br />Barcode : [% overduesloo.barcode %]
                     </td>
@@ -51,7 +51,7 @@
                         <a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% overduesloo.borrowernumber %]">[% overduesloo.borrowersurname %], [% overduesloo.borrowerfirstname %]</a>
                         <br />[% overduesloo.cardnumber %]
                         <br />[% overduesloo.borrowerphone %]<br />
-                    [% IF ( overduesloo.borroweremail ) %]<a href="mailto:[% overduesloo.borroweremail %]?subject=Overdue: [% overduesloo.title %]">
+                    [% IF ( overduesloo.borroweremail ) %]<a href="mailto:[% overduesloo.borroweremail %]?subject=Overdue: [% overduesloo.title |html %]">
                     [% overduesloo.borroweremail %]</a>[% END %]
                     </td>
                     <td>[% overduesloo.homebranch %] [% overduesloo.itemcallnumber %]
                         </td>
                         <td>
                             <p>
-                                <a href="/cgi-bin/koha/catalogue/MARCdetail.pl?biblionumber=[% todayoverduesloo.biblionumber %]">[% todayoverduesloo.title %]</a>
+                                <a href="/cgi-bin/koha/catalogue/MARCdetail.pl?biblionumber=[% todayoverduesloo.biblionumber %]">[% todayoverduesloo.title |html %]</a>
                                 &nbsp; (<b>[% todayoverduesloo.description %]</b>)
                                 <br />Barcode : [% todayoverduesloo.barcode %]
                             </p>
                             <p><a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% todayoverduesloo.borrowernumber %]">[% todayoverduesloo.borrowersurname %] &nbsp; [% todayoverduesloo.borrowerfirstname %]</a>
                             <br />[% todayoverduesloo.cardnumber %]<br />
                             <br />[% todayoverduesloo.borrowerphone %]<br />
-                        [% IF ( todayoverduesloo.borroweremail ) %]<a href="mailto:[% todayoverduesloo.borroweremail %]?subject=Overdue: [% todayoverduesloo.title %]">
+                        [% IF ( todayoverduesloo.borroweremail ) %]<a href="mailto:[% todayoverduesloo.borroweremail %]?subject=Overdue: [% todayoverduesloo.title |html %]">
                         [% todayoverduesloo.borroweremail %]</a>[% END %]
                             </p>
                         </td>
index 3c2c397..e2916d9 100644 (file)
             </tr>
             [% FOREACH trsfitemloo IN trsfitemloop %]
                 <tr>
-                    <td class="tf-title"><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% trsfitemloo.biblionumber %]">[% trsfitemloo.title %]</a></td>
+                    <td class="tf-title"><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% trsfitemloo.biblionumber %]">[% trsfitemloo.title |html %]</a></td>
                     <td class="tf-author">[% trsfitemloo.author %]</td>
                     <td class="tf-barcode"><a href="/cgi-bin/koha/catalogue/moredetail.pl?biblionumber=[% trsfitemloo.biblionumber %]&amp;itemnumber=[% trsfitemloo.itemnumber %]#item[% trsfitemloo.itemnumber %]">[% trsfitemloo.barcode %]</a></td>
                     <td class="tf-location">[% trsfitemloo.location %]</td>
index 633e756..6fd722c 100644 (file)
@@ -48,7 +48,7 @@ var relatives_borrowernumbers = new Array();
 var MSG_ADD_MESSAGE = _("Add a new message");
 var MSG_EXPORT_SELECT_CHECKOUTS = _("You must select checkout(s) to export");
 
-columns_settings = [% ColumnsSettings.GetColumns( 'circ', 'circulation', 'issues-table', 'json' ).raw %]
+columns_settings = [% ColumnsSettings.GetColumns( 'circ', 'circulation', 'issues-table', 'json' ) %]
 
 [% IF ( borrowernumber ) %]
     if($.cookie("holdfor") != [% borrowernumber %]){
@@ -348,7 +348,7 @@ $(document).ready(function() {
 </p>
 [% END %]
 
-    <input type="hidden" name="barcode" value="[% barcode %]" />
+    <input type="hidden" name="barcode" value="[% barcode |html %]" />
     <input type="hidden" name="borrowernumber" value="[% borrowernumber %]" />
     <input type="hidden" name="issueconfirmed" value="1" />
     [% IF ( DEBT ) %]<input type="hidden" name="debt_confirmed" value="1" />[% END %]
@@ -431,7 +431,7 @@ $(document).ready(function() {
         [% END %]
 
         [% IF ( UNKNOWN_BARCODE ) %]
-            <li>The barcode was not found [% barcode %]
+            <li>The barcode was not found [% barcode |html %]
            [% IF ( fast_cataloging ) %]
                [% IF ( CAN_user_editcatalogue_fast_cataloging ) %]
             <a href="/cgi-bin/koha/cataloguing/addbiblio.pl?frameworkcode=FA&amp;barcode=[% barcode |uri %]&amp;circborrowernumber=[% borrowernumber %]&amp;branch=[% branch %]&amp;duedatespec=[% duedatespec %]&amp;stickyduedate=[% stickyduedate %]">Fast cataloging</a>
@@ -771,7 +771,7 @@ No patron matched <span class="ex">[% message %]</span>
                    [% END %]
 
                    [% IF ( debarredcomment ) %]
-                       with the explanation: <br/><i>[% debarredcomment.raw | html_line_break %]</i>
+                       with the explanation: <br/><i>[% debarredcomment | html_line_break %]</i>
                    [% END %]
 
                    <br/>
@@ -812,16 +812,16 @@ No patron matched <span class="ex">[% message %]</span>
                     [% FOREACH w IN WaitingHolds %]
                         <ul>
                             <li>
-                                <a href="/cgi-bin/koha/reserve/request.pl?biblionumber=[% w.biblio.biblionumber %]">[% w.biblio.title %]</a>
+                                <a href="/cgi-bin/koha/reserve/request.pl?biblionumber=[% w.biblio.biblionumber %]">[% w.biblio.title | html %]</a>
                                 ([% ItemTypes.GetDescription( w.item.effective_itemtype ) %]),
-                                [% IF ( w.biblio.author ) %] by [% w.biblio.author %] [% END %]
+                                [% IF ( w.biblio.author ) %] by [% w.biblio.author | html %] [% END %]
                                 [% IF ( w.item.itemcallnumber ) %] [[% w.item.itemcallnumber %]] [% END %]
                                 Hold placed on [% w.reservedate | $KohaDates %].
 
                                 <br/>
                                 [% IF ( w.branch.branchcode == Branches.GetLoggedInBranchcode()  ) %]<strong class="waitinghere">[% ELSE %]<strong>[% END %]
                                     [% SET waiting_expires_on = w.waiting_expires_on %]
-                                    Waiting at [% w.branch.branchname %] [% IF waiting_expires_on %] until [% waiting_expires_on | $KohaDates %] [% END %]
+                                    Waiting at [% w.branch.branchname | html %] [% IF waiting_expires_on %] until [% waiting_expires_on | $KohaDates %] [% END %]
                                 </strong>
                             </li>
                         </ul>
@@ -846,7 +846,7 @@ No patron matched <span class="ex">[% message %]</span>
                                        <span class="circ-hlt">
                                                [% lib_messages_loo.message_date_formatted %]
                                                [% lib_messages_loo.branchcode %]
-                        <i>"[% lib_messages_loo.message.raw %]"</i>
+                                               <i>"[% lib_messages_loo.message %]"</i>
                                        </span>
                                        [% IF ( lib_messages_loo.can_delete ) %]
                                                <a href="/cgi-bin/koha/circ/del_message.pl?message_id=[% lib_messages_loo.message_id %]&amp;borrowernumber=[% lib_messages_loo.borrowernumber %]">[Delete]</a>
@@ -858,7 +858,7 @@ No patron matched <span class="ex">[% message %]</span>
                                </li>
                        [% END %]
                        [% FOREACH bor_messages_loo IN bor_messages_loop %]
-                <li><span class="">[% bor_messages_loo.message_date_formatted %] [% bor_messages_loo.branchcode %] <i>"[% bor_messages_loo.message.raw %]"</i></span> [% IF ( bor_messages_loo.can_delete ) %]<a href="/cgi-bin/koha/circ/del_message.pl?message_id=[% bor_messages_loo.message_id %]&amp;borrowernumber=[% bor_messages_loo.borrowernumber %]">[Delete]</a>
+                               <li><span class="">[% bor_messages_loo.message_date_formatted %] [% bor_messages_loo.branchcode %] <i>"[% bor_messages_loo.message %]"</i></span> [% IF ( bor_messages_loo.can_delete ) %]<a href="/cgi-bin/koha/circ/del_message.pl?message_id=[% bor_messages_loo.message_id %]&amp;borrowernumber=[% bor_messages_loo.borrowernumber %]">[Delete]</a>
                 [% ELSIF ( all_messages_del ) %]
                     <a href="/cgi-bin/koha/circ/del_message.pl?message_id=[% bor_messages_loo.message_id %]&amp;borrowernumber=[% bor_messages_loo.borrowernumber %]">[Delete]</a>
                 [% END %]</li>
index c09f87f..d73348c 100644 (file)
@@ -129,7 +129,7 @@ $(document).ready(function() {
             [% END %]
             <td>[% checkout_info.barcode %]</td>
             <td>
-              <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% checkout_info.item.biblionumber %]&amp;type=intra"><strong>[% checkout_info.item.title %][% FOREACH subtitl IN checkout_info.item.subtitle %] [% subtitl.subfield %][% END %]</strong></a>[% IF checkout_info.item.author %], by [% checkout_info.item.author %][% END %][% IF ( checkout_info.itme.itemnotes ) %]- <span class="circ-hlt">[% checkout_info.item.itemnotes %]</span>[% END %] <a href="/cgi-bin/koha/catalogue/moredetail.pl?biblionumber=[% checkout_info.item.biblionumber %]&amp;itemnumber=[% checkout_info.item.itemnumber %]#item[% checkout_info.item.itemnumber %]">[% checkout_info.item.barcode %]</a>
+              <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% checkout_info.item.biblionumber %]&amp;type=intra"><strong>[% checkout_info.item.title |html %][% FOREACH subtitl IN checkout_info.item.subtitle %] [% subtitl.subfield %][% END %]</strong></a>[% IF checkout_info.item.author %], by [% checkout_info.item.author %][% END %][% IF ( checkout_info.itme.itemnotes ) %]- <span class="circ-hlt">[% checkout_info.item.itemnotes %]</span>[% END %] <a href="/cgi-bin/koha/catalogue/moredetail.pl?biblionumber=[% checkout_info.item.biblionumber %]&amp;itemnumber=[% checkout_info.item.itemnumber %]#item[% checkout_info.item.itemnumber %]">[% checkout_info.item.barcode %]</a>
             </td>
             <td>
               [% IF checkout_info.NEEDSCONFIRMATION %]
@@ -255,7 +255,7 @@ $(document).ready(function() {
                     Too many checked out.
                   [% END %]
                   [% IF checkout_info.UNKNOWN_BARCODE %]
-                    <li>The barcode was not found [% checkout_info.barcode %]
+                    <li>The barcode was not found [% checkout_info.barcode |html %]
                   [% END %]
                   [% IF checkout_info.DEBT %]
                     The patron has a debt of [% checkout_info.DEBT %] <!-- Need debt_confirmed -->
index a9e9abf..5c94e96 100644 (file)
@@ -61,7 +61,7 @@ $(document).ready(function(){
                     <a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% item.borrowernumber %]">[%item.firstname %] [% item.surname %]</a>
                   </td>
                   <td>
-                    <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% item.biblionumber %]"><strong>[% item.title %]</strong></a>[% IF ( item.author ) %], by [% item.author %][% END %][% IF ( item.itemnotes ) %]- <span class="circ-hlt">[% item.itemnotes %]</span>[% END %]
+                    <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% item.biblionumber %]"><strong>[% item.title |html %]</strong></a>[% IF ( item.author ) %], by [% item.author %][% END %][% IF ( item.itemnotes ) %]- <span class="circ-hlt">[% item.itemnotes %]</span>[% END %]
                   </td>
                   <td>[% item.itemcallnumber %]</td>
                   <td>
index e944e54..4ebc7d2 100644 (file)
@@ -90,12 +90,12 @@ overdue as of [% todaysdate %][% IF ( isfiltered ) %] <span style="font-size:70%
 
 <p>
     [% IF ( isfiltered ) %]
-      <a href="overdue.pl?op=csv&amp;[% csv_param_string %]">Download file of displayed overdues</a>
+      <a href="overdue.pl?op=csv&amp;[% csv_param_string |html %]">Download file of displayed overdues</a>
     [% ELSE %]
       <a href="overdue.pl?op=csv">Download file of all overdues</a>
     [% END %]
 </p>
-<div class="sql"><pre>[% sql %]</pre></div>
+<div class="sql"><pre>[% sql |html %]</pre></div>
 <div class="searchresults">
 <table id="overduest">
 <thead><tr>
@@ -114,10 +114,10 @@ overdue as of [% todaysdate %][% IF ( isfiltered ) %] <span style="font-size:70%
     <tr>
         <td>[% overdueloo.duedate %]</td>
         <td><a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% overdueloo.borrowernumber %]">[% overdueloo.surname %][% IF (overdueloo.firstname) %], [% overdueloo.firstname %][% END %] ([% overdueloo.cardnumber %])</a>
-        [% IF ( overdueloo.email ) %][<a href="mailto:[% overdueloo.email %]?subject=[% INCLUDE subject %] [% overdueloo.title %]">email</a>][% END %]
+        [% IF ( overdueloo.email ) %][<a href="mailto:[% overdueloo.email %]?subject=[% INCLUDE subject %] [% overdueloo.title |html %]">email</a>][% END %]
         [% IF ( overdueloo.phone ) %]([% overdueloo.phone %])[% ELSIF ( overdueloo.mobile ) %]([% overdueloo.mobile %])[% ELSIF ( overdueloo.phonepro ) %]([% overdueloo.phonepro %])[% END %]</td>
         <td>[% IF overdueloo.branchcode %][% Branches.GetName( overdueloo.branchcode ) %][% END %]</td>
-        <td>[% INCLUDE 'biblio-default-view.inc' biblionumber = overdueloo.biblionumber %][% overdueloo.title %]  [% overdueloo.subtitle %]</a> [% IF ( overdueloo.author ) %], by [% overdueloo.author %][% END %][% IF ( overdueloo.enumchron ) %], [% overdueloo.enumchron %][% END %]
+        <td>[% INCLUDE 'biblio-default-view.inc' biblionumber = overdueloo.biblionumber %][% overdueloo.title |html %]  [% overdueloo.subtitle %]</a> [% IF ( overdueloo.author ) %], by [% overdueloo.author %][% END %][% IF ( overdueloo.enumchron ) %], [% overdueloo.enumchron %][% END %]
         </td>
                <td><a href="/cgi-bin/koha/catalogue/moredetail.pl?biblionumber=[% overdueloo.biblionumber %]&amp;itemnumber=[% overdueloo.itemnum %]#item[% overdueloo.itemnum %]">[% overdueloo.barcode %]</a></td>
                <td>[% overdueloo.itemcallnumber %]</td>
@@ -146,10 +146,10 @@ overdue as of [% todaysdate %][% IF ( isfiltered ) %] <span style="font-size:70%
     </li>
     </ol></fieldset>
     <ol>
-    <li><label>Name or cardnumber:</label><input type="text" name="borname" value="[% borname %]" /></li>
+    <li><label>Name or cardnumber:</label><input type="text" name="borname" value="[% borname |html %]" /></li>
     <li><label>Patron category:</label><select name="borcat" id="borcat"><option value="">Any</option>
       [% FOREACH borcatloo IN borcatloop %]
-        [% IF ( borcatloo.selected ) %]<option value="[% borcatloo.value %]" selected="selected">[% borcatloo.catname %]</option>[% ELSE %]<option value="[% borcatloo.value %]">[% borcatloo.catname %]</option>[% END %]
+        [% IF ( borcatloo.selected ) %]<option value="[% borcatloo.value |html %]" selected="selected">[% borcatloo.catname %]</option>[% ELSE %]<option value="[% borcatloo.value |html %]">[% borcatloo.catname %]</option>[% END %]
       [% END %]
       </select>
     </li>
@@ -169,14 +169,14 @@ overdue as of [% todaysdate %][% IF ( isfiltered ) %] <span style="font-size:70%
                <li>
                        <label>[% patron_attr_filter_loo.description %]:</label>
             [% IF ( patron_attr_filter_loo.authorised_value_category ) %]
-                <script type="text/javascript" x-code="[% patron_attr_filter_loo.code %]">create_auto_completion_responder([% patron_attr_filter_loo.domid %],"[% patron_attr_filter_loo.code %]");</script>
+                <script type="text/javascript" x-code="[% patron_attr_filter_loo.code |html %]">create_auto_completion_responder([% patron_attr_filter_loo.domid %],"[% patron_attr_filter_loo.code |html %]");</script>
                                <span id="pattrodue-getready-[% patron_attr_filter_loo.domid %]">
                                                <div class="pattrodue-autocomplete">
-                            <input autocomplete="off" id="pattrodue-input-[% patron_attr_filter_loo.domid %]" name="patron_attr_filter_[% patron_attr_filter_loo.code %]" value="[% patron_attr_filter_loo.cgivalue %]"  class="pattrodue-input" type="text" />
+                                                       <input autocomplete="off" id="pattrodue-input-[% patron_attr_filter_loo.domid %]" name="patron_attr_filter_[% patron_attr_filter_loo.code |html %]" value="[% patron_attr_filter_loo.cgivalue |html %]"  class="pattrodue-input" type="text" />
                                                </div>
                                </span>
                        [% ELSE %]
-                <input type="text" name="patron_attr_filter_[% patron_attr_filter_loo.code %]" value="[% patron_attr_filter_loo.cgivalue %]"/>
+                               <input type="text" name="patron_attr_filter_[% patron_attr_filter_loo.code |html %]" value="[% patron_attr_filter_loo.cgivalue |html %]"/>
                        [% END %]
                        [% IF ( patron_attr_filter_loo.repeatable ) %]
                 <a href="#" onclick="clone_parent(this); return false;">Add</a>
@@ -193,8 +193,8 @@ overdue as of [% todaysdate %][% IF ( isfiltered ) %] <span style="font-size:70%
 
     <li><label>Item type:</label><select name="itemtype" id="itemtype"><option value="">Any</option>
       [% FOREACH itemtypeloo IN itemtypeloop %][% IF ( itemtypeloo.selected ) %]
-        <option value="[% itemtypeloo.value %]" selected="selected">[% itemtypeloo.itemtypename %]</option>[% ELSE %]
-        <option value="[% itemtypeloo.value %]">[% itemtypeloo.itemtypename %]</option>[% END %]
+        <option value="[% itemtypeloo.value |html %]" selected="selected">[% itemtypeloo.itemtypename %]</option>[% ELSE %]
+        <option value="[% itemtypeloo.value |html %]">[% itemtypeloo.itemtypename %]</option>[% END %]
       [% END %]
       </select>
     </li>
@@ -204,8 +204,8 @@ overdue as of [% todaysdate %][% IF ( isfiltered ) %] <span style="font-size:70%
         <select name="homebranch" id="homebranch">
             <option value="">Any</option>
             [% FOREACH homebranchloo IN homebranchloop %][% IF ( homebranchloo.selected ) %]
-            <option value="[% homebranchloo.value %]" selected="selected">[% homebranchloo.branchname %]</option>[% ELSE %]
-            <option value="[% homebranchloo.value %]">[% homebranchloo.branchname %]</option>[% END %]
+            <option value="[% homebranchloo.value |html %]" selected="selected">[% homebranchloo.branchname %]</option>[% ELSE %]
+            <option value="[% homebranchloo.value |html %]">[% homebranchloo.branchname %]</option>[% END %]
             [% END %]
         </select>
     </li>
@@ -215,8 +215,8 @@ overdue as of [% todaysdate %][% IF ( isfiltered ) %] <span style="font-size:70%
             <select name="holdingbranch" id="holdingbranch">
             <option value="">Any</option>
             [% FOREACH holdingbranchloo IN holdingbranchloop %][% IF ( holdingbranchloo.selected ) %]
-            <option value="[% holdingbranchloo.value %]" selected="selected">[% holdingbranchloo.branchname %]</option>[% ELSE %]
-            <option value="[% holdingbranchloo.value %]">[% holdingbranchloo.branchname %]</option>[% END %]
+            <option value="[% holdingbranchloo.value |html %]" selected="selected">[% holdingbranchloo.branchname %]</option>[% ELSE %]
+            <option value="[% holdingbranchloo.value |html %]">[% holdingbranchloo.branchname %]</option>[% END %]
             [% END %]
         </select>
     </li>
@@ -226,8 +226,8 @@ overdue as of [% todaysdate %][% IF ( isfiltered ) %] <span style="font-size:70%
         <option value="">Any</option>
       [% FOREACH branchloo IN branchloop %]
         [% IF ( branchloo.selected ) %]
-        <option value="[% branchloo.value %]" selected="selected">[% branchloo.branchname %]</option>[% ELSE %]
-        <option value="[% branchloo.value %]">[% branchloo.branchname %]</option>[% END %]
+        <option value="[% branchloo.value |html %]" selected="selected">[% branchloo.branchname %]</option>[% ELSE %]
+        <option value="[% branchloo.value |html %]">[% branchloo.branchname %]</option>[% END %]
       [% END %]
       </select>
     </li>
@@ -253,8 +253,8 @@ overdue as of [% todaysdate %][% IF ( isfiltered ) %] <span style="font-size:70%
     </option>
 [% END %]
        [% FOREACH patron_attr_order_loo IN patron_attr_order_loop %]
-        [% IF ( patron_attr_order_loo.selected ) %]<option value="[% patron_attr_order_loo.value %]" selected="selected">[% patron_attr_order_loo.label %]</option>
-        [% ELSE %]<option value="[% patron_attr_order_loo.value %]">[% patron_attr_order_loo.label %]</option>[% END %]
+        [% IF ( patron_attr_order_loo.selected ) %]<option value="[% patron_attr_order_loo.value |html %]" selected="selected">[% patron_attr_order_loo.label %]</option>
+        [% ELSE %]<option value="[% patron_attr_order_loo.value |html %]">[% patron_attr_order_loo.label %]</option>[% END %]
        [% END %]
 </select></li>
 
index 0ef5515..919f0c3 100644 (file)
@@ -117,7 +117,7 @@ $(document).ready(function() {
             <td>
             <p>
                 [% INCLUDE 'biblio-default-view.inc' biblionumber = reserveloo.biblionumber %]
-                [% reserveloo.title %]</a></p>
+                [% reserveloo.title |html %]</a></p>
                 [% IF ( reserveloo.author ) %]<p> by [% reserveloo.author %]</p>[% END %]
             </td>
         [% ELSE %]
index dd3ae2f..9bf6707 100644 (file)
@@ -14,7 +14,7 @@
 <link rel="shortcut icon" href="[% IF ( IntranetFavicon ) %][% IntranetFavicon %][% ELSE %][% interface %]/[% theme %]/img/favicon.ico[% END %]" type="image/x-icon" />
 <link rel="stylesheet" type="text/css" href="[% themelang %]/css/print.css" />
 [% IF ( Koha.Preference('SlipCSS') ) %]
-<link rel="stylesheet" type="text/css" href="[% Koha.Preference('SlipCSS').raw %]" />
+<link rel="stylesheet" type="text/css" href="[% Koha.Preference('SlipCSS') %]" />
 [% END %]
 
 [% INCLUDE 'slip-print.inc' #printThenClose %]
@@ -27,7 +27,7 @@
 [% IF ( slip ) %][% slip %][% ELSE %]No slip template found[% END %]
 </pre>
 [% ELSE %]
-[% IF ( slip ) %][% slip.raw %][% ELSE %]No slip template found[% END %]
+[% IF ( slip ) %][% slip %][% ELSE %]No slip template found[% END %]
 [% END %]
 
 [% INCLUDE 'intranet-bottom.inc' %]
index 72aa022..5a33706 100644 (file)
@@ -3,7 +3,7 @@
 
 [% INCLUDE 'doc-head-open.inc' %]
 
-<title>Koha &rsaquo; Circulation &rsaquo; Renew [% title %]</title>
+<title>Koha &rsaquo; Circulation &rsaquo; Renew [% title |html %]</title>
 
 [% INCLUDE 'doc-head-close.inc' %]
 
index b377769..67f4226 100644 (file)
@@ -70,7 +70,7 @@
             <td><p>[% reserveloo.reservecount %]</p></td>
             <td><p>[% reserveloo.itemcount %]</p></td>
             <td><p class="ratiolimit">[% reserveloo.thisratio %]</p></td>
-            <td> [% INCLUDE 'biblio-default-view.inc' biblionumber = reserveloo.biblionumber %][% reserveloo.title %] [% IF ( reserveloo.subtitle ) %][% FOREACH subtitl IN reserveloo.subtitle %][% subtitl.subfield %][% END %][% END %]</a>[% IF ( reserveloo.author ) %] by [% reserveloo.author %][% END %]
+            <td> [% INCLUDE 'biblio-default-view.inc' biblionumber = reserveloo.biblionumber %][% reserveloo.title |html %] [% IF ( reserveloo.subtitle ) %][% FOREACH subtitl IN reserveloo.subtitle %][% subtitl.subfield %][% END %][% END %]</a>[% IF ( reserveloo.author ) %] by [% reserveloo.author %][% END %]
             </td>
             <td><p>[% reserveloo.homebranch_list %]</p></td>
             <td><p>[% reserveloo.holdingbranch_list %]</p></td>
index aace2fb..a56b8e6 100644 (file)
@@ -6,7 +6,7 @@
 [% USE AuthorisedValues %]
 
 [% INCLUDE 'doc-head-open.inc' %]
-<title>Koha &rsaquo; Circulation &rsaquo; Check in [% title %]</title>
+<title>Koha &rsaquo; Circulation &rsaquo; Check in [% title |html %]</title>
 [% INCLUDE 'doc-head-close.inc' %]
 
 [% INCLUDE 'calendar.inc' %]
@@ -135,7 +135,7 @@ $(document).ready(function () {
 [% IF ( collectionItemNeedsTransferred ) %]
  <div id="rotating-collection" class="dialog message">
         <h3>Please transfer item to: [% collectionBranch %]</h3>
-            <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode %]: [% title %]</a></p>
+            <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode |html %]: [% title |html %]</a></p>
             <p>This item is part of a rotating collection.</p>
 </div>
 [% END %]
@@ -170,7 +170,7 @@ $(document).ready(function () {
 
 [% IF ( wrongbranch ) %]
     <div class="dialog alert"><h3>Cannot check in</h3>
-        <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode %]: [% title %]</a></p>
+        <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode |html %]: [% title |html %]</a></p>
         </p><strong>NOT CHECKED IN</strong></p>
         <p>This item must be checked in at following library: <strong>[% Branches.GetName( rightbranch ) %]</strong></p>
     </div>
@@ -180,7 +180,7 @@ $(document).ready(function () {
     <div id="return2" class="dialog message">
         <!-- WrongTransfer -->
         <h3>Please return item to: [% Branches.GetName( TransferWaitingAt ) %]</h3>
-            <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode %]: [% title %]</a></p>
+            <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode |html %]: [% title |html %]</a></p>
         <ul><li><a href="#" onclick="Dopop('transfer-slip.pl?transferitem=[% itemnumber %]&amp;&amp;branchcode=[% homebranch %]&amp;op=slip'); return true;">Print transfer slip</a></li><li><a href="/cgi-bin/koha/circ/returns.pl?itemnumber=[% itemnumber %]&amp;canceltransfer=1">Cancel transfer</a></li></ul>
 [% IF ( wborcnum ) %]<h5>Hold for:</h5>
         <ul><li><a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% borrowernumber %]">
@@ -215,7 +215,7 @@ $(document).ready(function () {
 
     <div id="hold-found1" class="dialog message audio-alert-action">
         <h3>Hold found (item is already waiting)</h3>
-        <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode %]: [% title %]</a></p>
+        <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode |html %]: [% title |html %]</a></p>
         [% IF ( reservenotes ) %]<h4>Notes: [% reservenotes %]</h4>[% END %]
         <h4>Hold for:</h4>
                        <ul>
@@ -264,7 +264,7 @@ $(document).ready(function () {
                <!-- diffbranch -->
         <div id="transfer-needed" class="dialog message audio-alert-action">
             <h3>Hold needing transfer found</h3>
-                <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode %]: [% title %]</a></p>
+                <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode |html %]: [% title |html %]</a></p>
                 <h4>Hold for: </h4>
                     <ul>
                         <li><a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% borrowernumber %]">[% borsurname %], [% borfirstname %]</a> ([% borcnum %])</li>
@@ -309,7 +309,7 @@ $(document).ready(function () {
     <!-- transfer: item with no reservation, must be returned according to home library circulation rules -->
         <div id="return1" class="dialog message audio-alert-action">
             <h3>Please return item to: [% Branches.GetName( returnbranch ) %]</h3>
-            <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode %]: [% title %]</a></p>
+            <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode |html %]: [% title |html %]</a></p>
             <ul><li><a href="#" onclick="Dopop('transfer-slip.pl?transferitem=[% itemnumber %]&amp;branchcode=[% returnbranch %]&amp;op=slip'); return true;">Print slip</a> )</li></ul>
         </div>
     [% END %]
@@ -344,7 +344,7 @@ $(document).ready(function () {
        <!-- diffbranch -->
         <h3 class="audio-alert-action">Item consigned:</h3>
         <table>
-        <caption><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% title %]</a></caption>
+        <caption><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% title |html %]</a></caption>
         <tr>
             <th>Hold for:</th>
             <td>[% name %]</td>
@@ -373,7 +373,7 @@ $(document).ready(function () {
 
     <div id="hold-found2" class="dialog message audio-alert-action">
       <h3>Hold found</h3>
-          <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode %]: [% title %]</a></p>
+          <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode |html %]: [% title |html %]</a></p>
         [% IF ( reservenotes ) %]<h4>Notes: [% reservenotes %]</h4>[% END %]
         <h5>Hold for:</h5>
                <ul>
@@ -426,7 +426,7 @@ $(document).ready(function () {
     <div class="dialog alert audio-alert-warning">
         <h3>Check in message</h3>
         [% IF itembiblionumber %]
-            <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode %]: [% title %]</a></p>
+            <p><a href="/cgi-bin/koha/catalogue/detail.pl?type=intra&amp;biblionumber=[% itembiblionumber %]">[% itembarcode |html %]: [% title |html %]</a></p>
         [% END %]
         [% FOREACH errmsgloo IN errmsgloop %]
                     [% IF ( errmsgloo.NotForLoanStatusUpdated ) %]
@@ -602,7 +602,7 @@ $(document).ready(function () {
                 [% END %]
             </td>
             <td class="ci-title"><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% riloo.itembiblionumber %]">
-                    [% riloo.itemtitle %]</a></td>
+                    [% riloo.itemtitle |html %]</a></td>
             <td class="ci-author">[% riloo.itemauthor %]</td>
             <td class="ci-barcode"><a href="/cgi-bin/koha/catalogue/moredetail.pl?biblionumber=[% riloo.itembiblionumber %]&amp;itemnumber=[% riloo.itemnumber %]#item[% riloo.itemnumber %]">[% riloo.barcode %]</a></td>
             <td class="ci-homelibrary">[% Branches.GetName( riloo.homebranch ) %]</td>
index 0c0ce5c..faaa963 100644 (file)
@@ -34,10 +34,10 @@ Updated:<ul>
     [% END %]
     [% END %]
     </ul>
-<form method="post" action="[% referer or "/cgi-bin/koha/circ/circulation.pl" %]">
+<form method="post" action="[% referer or "/cgi-bin/koha/circ/circulation.pl" |html %]">
     <div class="noshow">
         [% FOREACH recycle_loo IN recycle_loop %]
-        <input type="text" name="[% recycle_loo.param %]" value="[% recycle_loo.value %]" />
+        <input type="text" name="[% recycle_loo.param %]" value="[% recycle_loo.value |html %]" />
         [% END %]
     </div>
     <button type="submit">Continue</button>
@@ -84,9 +84,9 @@ Updated:<ul>
 </fieldset>
 <div class="noshow">
     [% FOREACH recycle_loo IN recycle_loop %]
-    <input type="text" name="[% recycle_loo.param %]" value="[% recycle_loo.value %]" />
+    <input type="text" name="[% recycle_loo.param %]" value="[% recycle_loo.value |html %]" />
     [% END %]
-    <input type="hidden" name="oldreferer" value="[% referer or "/cgi-bin/koha/circ/circulation.pl" %]" />
+    <input type="hidden" name="oldreferer" value="[% referer or "/cgi-bin/koha/circ/circulation.pl" |html %]" />
 </div>
 </form>
 <!-- /updated -->
index 99e1703..5854fdb 100644 (file)
@@ -16,7 +16,7 @@ window.close();
 <h3>Transfer to [% branchname %]</h3>
 
 <h3>ITEM</h3>
- <h4>[% biblio.title %]</h4>
+ <h4>[% biblio.title |html %]</h4>
  <h5>[% biblio.author %] </h5>
  <ul>
     [% IF ( item.barcode ) %]<li>[% item.barcode %]</li>[% END %]
index d64395f..877be7c 100644 (file)
@@ -60,7 +60,7 @@ $(document).ready(function() {
                 [% END %]
                     <td><p><span title="[% reser.datetransfer %]">[% reser.datetransfer | $KohaDates %]</span></p> [% IF ( reser.messcompa ) %]<span class="error">Transfer is [% reser.diff %] days late</span>[% END %]</td>
                     <td>
-                        [% INCLUDE 'biblio-default-view.inc' biblionumber = reser.biblionumber %][% reser.title %] [% IF ( reser.subtitle ) %] [% FOREACH subtitl IN reser.subtitle %][% subtitl.subfield %][% END %][% END %]</a> [% IF ( reser.author ) %]by [% reser.author %][% END %]
+                        [% INCLUDE 'biblio-default-view.inc' biblionumber = reser.biblionumber %][% reser.title |html %] [% IF ( reser.subtitle ) %] [% FOREACH subtitl IN reser.subtitle %][% subtitl.subfield %][% END %][% END %]</a> [% IF ( reser.author ) %]by [% reser.author %][% END %]
                             [% IF ( reser.itemtype ) %] (<b>[% reser.itemtype %]</b>)[% END %]
                             <br />Barcode: [% reser.barcode %]
                     </td>
@@ -72,7 +72,7 @@ $(document).ready(function() {
                             [% IF ( reser.borrowermail ) %]
                                 <br />
                                 [% BLOCK subject %]Hold:[% END %]
-                                <a href="mailto:[% reser.borrowermail %]?subject=[% INCLUDE subject %] [% reser.title %]">
+                                <a href="mailto:[% reser.borrowermail %]?subject=[% INCLUDE subject %] [% reser.title |html %]">
                                     [% reser.borrowermail %]
                                 </a>
                             [% END %]
index 5aacc66..e419bcd 100644 (file)
@@ -68,7 +68,7 @@ $(document).ready(function() {
      <tbody>[% FOREACH itemsloo IN itemsloop %]
         <tr>
             <td class="hq-title">
-                <p><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% itemsloo.biblionumber %]"><strong>[% itemsloo.title %]</strong> [% FOREACH s IN itemsloo.subtitle %] [% s %][% END %]</a></p>
+                <p><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% itemsloo.biblionumber %]"><strong>[% itemsloo.title | html %]</strong> [% FOREACH s IN itemsloo.subtitle %] [% s %][% END %]</a></p>
                 <p>
                     <div class="hq-biblionumber content_hidden">[% itemsloo.biblionumber %]</div>
                     <div class="hq-author">[% itemsloo.author %]</div>
index 3ec4f1b..1028033 100644 (file)
@@ -90,7 +90,7 @@
                 <tr>
                     <td><span title="[% reserveloo.waitingdate %]">[% reserveloo.waitingdate | $KohaDates %]</span></td>
                     <td>[% INCLUDE 'biblio-default-view.inc' biblionumber = reserveloo.biblionumber %]
-                        [% reserveloo.title %] [% FOREACH subtitl IN reserveloo.subtitle %] [% subtitl.subfield %][% END %]
+                        [% reserveloo.title |html %] [% FOREACH subtitl IN reserveloo.subtitle %] [% subtitl.subfield %][% END %]
                         </a>
                             [% UNLESS ( item_level_itypes ) %][% IF ( reserveloo.itemtype ) %]&nbsp; (<b>[% reserveloo.itemtype %]</b>)[% END %][% END %]
                             <br />Barcode: [% reserveloo.barcode %]
                <tbody>[% FOREACH overloo IN overloop %]
                     <tr>
                         <td><p><span title="[% overloo.waitingdate %]">[% overloo.waitingdate | $KohaDates %]</span></p></td>
-                        <td>[% INCLUDE 'biblio-default-view.inc' biblionumber = overloo.biblionumber %][% overloo.title %]
+                        <td>[% INCLUDE 'biblio-default-view.inc' biblionumber = overloo.biblionumber %][% overloo.title |html %]
                             [% FOREACH subtitl IN overloo.subtitle %] [% subtitl.subfield %][% END %]
                         </a>
                             [% UNLESS ( item_level_itypes ) %][% IF ( overloo.itemtype ) %]&nbsp; (<b>[% overloo.itemtype %]</b>)[% END %][% END %]
index dc2a254..c3509cd 100644 (file)
@@ -31,7 +31,7 @@
 <!-- login prompt time-->
 <form action="/cgi-bin/koha/installer/install.pl" method="post" name="mainform" id="mainform">
 [% FOREACH INPUT IN INPUTS %]
-    <input type="hidden" name="[% INPUT.name %]" value="[% INPUT.value %]" />
+    <input type="hidden" name="[% INPUT.name |html %]" value="[% INPUT.value |html %]" />
 [% END %]
 <h3>Welcome to the Koha web installer</h3>
 <p>Before we begin, please verify you have the correct credentials to continue. Please log in
index 6bcd69e..3ae276f 100644 (file)
   <p>Update report :</p>
     <ul>
       [% FOREACH update_repor IN update_report %]
-          <li>[% update_repor.line %]</li>
+          <li>[% update_repor.line |html %]</li>
       [% END %]
     </ul>
   [% END %]
   <p>Update errors :</p>
     <ul>
       [% FOREACH update_error IN update_errors %]
-          <li class="update_error">[% update_error.line %]</li>
+          <li class="update_error">[% update_error.line |html %]</li>
       [% END %]
     </ul>
   [% END %]
index 90c0b6a..be0e5aa 100644 (file)
             [% IF ( IntranetmainUserblock ) %]
                 <div class="yui-g" id="area-userblock">
                     <div class="user-info">
-                        [% IntranetmainUserblock.raw %]
+                        [% IntranetmainUserblock %]
                     </div>
                 </div>
             [% END %]
             [% SET newsdisp = Koha.Preference('NewsAuthorDisplay') %]
             [% FOREACH koha_new IN koha_news %]
                 <div class="newsitem" id="news[% koha_new.idnew %]"><h4>[% koha_new.title %]</h4>
-                    <p>[% koha_new.new.raw %]</p>
+                    <p>[% koha_new.new %]</p>
                     <p class="newsfooter"> Posted on [% koha_new.newdate %][% IF( ( newsdisp == 'staff' || newsdisp == 'both' ) && koha_new.borrowernumber ) %] by <span class="newsauthor_title">[% koha_new.author_title %] </span>[% koha_new.author_firstname %] [% koha_new.author_surname %]<br />[% END %]
                         [% IF ( CAN_user_tools ) %]
                             <a href="/cgi-bin/koha/tools/koha-news.pl?op=add_form&amp;id=[% koha_new.idnew %]">Edit</a>
index e3c70c6..017af77 100644 (file)
                                             [% END %]
                                            <li> <fieldset id="layout_string" class="brief">
                                                 <label for="format_string">Data fields</label>
-                                                <input type="text" name="format_string" id="format_string" size="80" value="[% format_string %]" />
+                                                <input type="text" name="format_string" id="format_string" size="80" value="[% format_string |html %]" />
                                                 <div class="hint">
                                                     <p>Enter a comma separated list of fields to print.  You may include any <em>Koha field</em> or MARC subfield.</p>
                                                     <p>See online help for advanced options</p>
                                 </li>
                                 <li>
                                     <label for="font_size">Font size: </label>
-                                    <input type="text" name="font_size" id="font_size" size="2" value="[% font_size %]" />
+                                    <input type="text" name="font_size" id="font_size" size="2" value="[% font_size |html %]" />
                                 </li>
                                 <li>
                                     <label for="oblique_title">Oblique title: </label>
index f15dbfb..65dc131 100644 (file)
@@ -69,7 +69,7 @@
                 <input type="hidden" name="ccl_query" value="[% ccl_query %]" />
             [% FOREACH result_se IN result_set %]
             <div style="border-bottom:1px solid #CCC;margin: .5em 0;">
-                <h4>[% result_se.title %]</h4>
+                           <h4>[% result_se.title |html %]</h4>
                             <p>[% IF ( result_se.author ) %]by [% result_se.author %][% END %]
                             [[% result_se.itemtype %]], [% IF ( result_se.publishercode ) %][% result_se.publishercode %] [% END %][% IF ( result_se.place ) %][% result_se.place %] [% END %][% IF ( result_se.copyrightdate ) %][% result_se.copyrightdate %], [% END %][% IF ( result_se.pages ) %][% result_se.pages %][% END %][% IF ( result_se.isbn ) %], <b>ISBN: </b>[% result_se.isbn %][% END %][% IF ( result_se.notes ) %],<br />[% result_se.notes %][% END %]</p>
 
index 3fdc66e..fabc07b 100644 (file)
                        .noprint { display: none; }
                }
        </style>
-[% IF ( IntranetUserCSS ) %]<style type="text/css">[% IntranetUserCSS.raw %]</style>[% END %]
+[% IF ( IntranetUserCSS ) %]<style type="text/css">[% IntranetUserCSS %]</style>[% END %]
 [% IF ( IntranetUserJS ) %]
     <script type="text/javascript" src="[% interface %]/lib/jquery/jquery.js"></script>
     <script type="text/javascript">
     //<![CDATA[
-    [% IntranetUserJS.raw %]
+    [% IntranetUserJS %]
     //]]>
     </script>
 [% END %]
index 8228f61..824c41c 100644 (file)
@@ -100,7 +100,7 @@ $(document).ready(function() {
           [% CASE %][% account.accounttype %]
         [%- END -%]
         [%- IF account.description %], [% account.description %][% END %]
-        &nbsp;[% IF ( account.itemnumber ) %]<a href="/cgi-bin/koha/catalogue/moredetail.pl?biblionumber=[% account.biblionumber %]&amp;itemnumber=[% account.itemnumber %]">View item</a>&nbsp;[% END %][% account.title %]</td>
+        &nbsp;[% IF ( account.itemnumber ) %]<a href="/cgi-bin/koha/catalogue/moredetail.pl?biblionumber=[% account.biblionumber %]&amp;itemnumber=[% account.itemnumber %]">View item</a>&nbsp;[% END %][% account.title |html %]</td>
       <td>[% account.note | html_line_break %]</td>
       [% IF ( account.amountcredit ) %]<td class="credit" style="text-align: right;">[% ELSE %]<td class="debit" style="text-align: right;">[% END %][% account.amount %]</td>
       [% IF ( account.amountoutstandingcredit ) %]<td class="credit" style="text-align: right;">[% ELSE %]<td class="debit" style="text-align: right;">[% END %][% account.amountoutstanding %]</td>
index 6d74cce..ad360ec 100644 (file)
@@ -148,7 +148,7 @@ $(document).ready(function() {
     });
 
     // Apply DataTables on the results table
-    var columns_settings = [% ColumnsSettings.GetColumns( 'members', 'member', 'memberresultst', 'json' ).raw %];
+    var columns_settings = [% ColumnsSettings.GetColumns( 'members', 'member', 'memberresultst', 'json' ) %];
     dtMemberResults = KohaTable("#memberresultst", {
         'bServerSide': true,
         'sAjaxSource': "/cgi-bin/koha/svc/members/search",
index d66357f..8a8d3d4 100644 (file)
                 <label for="btitle">
             [% END %]
             Salutation: </label>
-            [% borrotitlepopup.raw %]
+            [% borrotitlepopup %]
             [% IF ( mandatorytitle ) %]<span class="required">Required</span>[% END %]
             </li>
                [% END %]
 
 [% END %]
 [% UNLESS noaddress && noaddress2 && nocity && nostate && nozipcode && nocountry %]
-    [% SWITCH Koha.Preference( 'AddressFormat' ) %]
-        [% CASE 'de' %]
-            [% INCLUDE 'member-main-address-style-de.inc' %]
-        [% CASE # us %]
-            [% INCLUDE 'member-main-address-style-us.inc' %]
-     [% END %]
+    [% IF Koha.Preference( 'AddressFormat' ) %]
+        [% INCLUDE "member-main-address-style-${ Koha.Preference( 'AddressFormat' ) }.inc" %]
+    [% ELSE %]
+        [% INCLUDE 'member-main-address-style-us.inc' %]
+    [% END %]
 [% END # nostreet && nocity etc group%]
 
 [% UNLESS nophone && nophonepro && nomobile && noemail && noemailpro && nofax %]
 [% IF ( step_6 ) %]
 
     [% UNLESS noB_address && noB_address2 && noB_city && noB_zipcode && noB_state && noB_country &&nocontactnote && noB_phone && noB_email %]
-    [% SWITCH Koha.Preference( 'AddressFormat' ) %]
-        [% CASE 'de' %]
-            [% INCLUDE 'member-alt-address-style-de.inc' %]
-        [% CASE # us %]
+        [% IF Koha.Preference( 'AddressFormat' ) %]
+            [% INCLUDE "member-alt-address-style-${ Koha.Preference( 'AddressFormat' ) }.inc" %]
+        [% ELSE %]
             [% INCLUDE 'member-alt-address-style-us.inc' %]
-     [% END %]
-
+        [% END %]
     [% END # UNLESS noB_address && noB_city && noB_state && noB_phone && noB_email %]
 [% END %]
 [% IF ( step_2 ) %]
     [% UNLESS noaltcontactsurname && noaltcontactfirstname && noaltcontactaddress1 && noaltcontactaddress2 && noaltcontactaddress3 && noaltcontactstate && noaltcontactzipcode && noaltcontactcountry && noaltcontactphone %]
-    [% SWITCH Koha.Preference( 'AddressFormat' ) %]
-        [% CASE 'de' %]
-            [% INCLUDE 'member-alt-contact-style-de.inc' %]
-        [% CASE # us %]
+        [% IF Koha.Preference( 'AddressFormat' ) %]
+            [% INCLUDE "member-alt-contact-style-${ Koha.Preference( 'AddressFormat' ) }.inc" %]
+        [% ELSE %]
             [% INCLUDE 'member-alt-contact-style-us.inc' %]
-     [% END %]
+        [% END %]
     [% END # UNLESS noaltcontactsurname && noaltcontactfirstname etc %]
 
 [% END %]
                             [% FOREACH d IN debarments %]
                                 <tr>
                                     <td>[% d.type %]</td>
-                                    <td>[% d.comment.raw %]</td>
+                                    <td>[% d.comment %]</td>
                                     <td>[% IF d.expiration %] [% d.expiration | $KohaDates %] [% ELSE %] <i>Indefinite</i> [% END %]</td>
                                     [% IF CAN_user_borrowers && CAN_user_circulate_manage_restrictions %]
                                       <td>
             [% FOREACH patron_attribute IN pa_loo.items %]
                 <li data-category_code="[% patron_attribute.category_code %]">
                     <label for="[% patron_attribute.form_id %]">[% patron_attribute.description %]: </label>
-                        <input type="hidden" id="[% patron_attribute.form_id %]_code" name="[% patron_attribute.form_id %]_code" value="[% patron_attribute.code %]" />
+                        <input type="hidden" id="[% patron_attribute.form_id %]_code" name="[% patron_attribute.form_id %]_code" value="[% patron_attribute.code |html %]" />
                         [% IF ( patron_attribute.use_dropdown ) %]
                             <select id="[% patron_attribute.form_id %]" name="[% patron_attribute.form_id %]">
                                 <option value=""></option>
index daf3711..d7637ec 100644 (file)
@@ -44,7 +44,7 @@
                 [% FOREACH issue IN issues %]
                     [% IF ( issue.overdue ) %]<tr class="overdue">[% ELSE %]<tr>[% END %]
                         <td>
-                            [% issue.title %]
+                            [% issue.title |html %]
                             <a href="/cgi-bin/koha/catalogue/detail.pl?item=[% issue.itemnumber %]&amp;biblionumber=[% issue.biblionumber %]&amp;bi=[% issue.biblioitemnumber %]"></a>
                         </td>
                         <td>[% issue.author %]</td>
                 <tr>
                     <td>
                         [% IF ( account.itemnumber ) %]<a href="/cgi-bin/koha/catalogue/moredetail.pl?biblionumber=[% account.biblionumber %]&amp;itemnumber=[% account.itemnumber %]">[% END %]
-                        [% account.description %]&nbsp;[% IF ( account.printtitle ) %] [% account.title %][% END %]
+                        [% account.description %]&nbsp;[% IF ( account.printtitle ) %] [% account.title |html %][% END %]
                         [% IF ( account.itemnumber ) %]</a>[% END %]
                     </td>
                     <td>[% account.date | $KohaDates %]</td>
index 81ae05b..c7d67a1 100644 (file)
@@ -23,7 +23,7 @@ Checked out to [% firstname %] [% surname %] <br />
 [% FOREACH issueloo IN issueloop %]
 [% IF ( issueloo.red ) %][% ELSE %]
 [% IF ( issueloo.today ) %]
-<p><a href="/cgi-bin/koha/catalogue/detail.pl?item=[% issueloo.itemnumber %]&amp;biblionumber=[% issueloo.biblionumber %]&amp;bi=[% issueloo.biblioitemnumber %]">[% issueloo.title %]</a><br />
+<p><a href="/cgi-bin/koha/catalogue/detail.pl?item=[% issueloo.itemnumber %]&amp;biblionumber=[% issueloo.biblionumber %]&amp;bi=[% issueloo.biblioitemnumber %]">[% issueloo.title |html %]</a><br />
 Barcode: [% issueloo.barcode %]<br />
 Date due: [% issueloo.date_due %]<br /></p>
     [% END %]
@@ -34,7 +34,7 @@ Date due: [% issueloo.date_due %]<br /></p>
 <h4>Checked out</h4>
 [% FOREACH issueloo IN issueloop %]
 [% IF ( issueloo.red ) %][% ELSE %]
-<p><a href="/cgi-bin/koha/catalogue/detail.pl?item=[% issueloo.itemnumber %]&amp;biblionumber=[% issueloo.biblionumber %]&amp;bi=[% issueloo.biblioitemnumber %]">[% issueloo.title %]</a><br />
+<p><a href="/cgi-bin/koha/catalogue/detail.pl?item=[% issueloo.itemnumber %]&amp;biblionumber=[% issueloo.biblionumber %]&amp;bi=[% issueloo.biblioitemnumber %]">[% issueloo.title |html %]</a><br />
 Barcode: [% issueloo.barcode %]<br />
 Date due: [% issueloo.date_due %]<br /></p>
     [% END %]
@@ -48,7 +48,7 @@ Date due: [% issueloo.date_due %]<br /></p>
 <h4>Overdues</h4>
     [% FOREACH issueloo IN issueloop %]
     [% IF ( issueloo.red ) %]
-<p><a href="/cgi-bin/koha/catalogue/detail.pl?item=[% issueloo.itemnumber %]&amp;biblionumber=[% issueloo.biblionumber %]&amp;bi=[% issueloo.biblioitemnumber %]">[% issueloo.title %]</a><br />
+<p><a href="/cgi-bin/koha/catalogue/detail.pl?item=[% issueloo.itemnumber %]&amp;biblionumber=[% issueloo.biblionumber %]&amp;bi=[% issueloo.biblioitemnumber %]">[% issueloo.title |html %]</a><br />
 Barcode: [% issueloo.barcode %]<br />
 Date due: [% issueloo.date_due %]</p>
 [% END %]
@@ -61,7 +61,7 @@ Date due: [% issueloo.date_due %]</p>
                        <!-- [% koha_news_count %] recent news item(s) -->
             [% FOREACH koha_new IN koha_news %]
                     <div class="newsitem" id="news[% koha_new.idnew %]"><h5 style="margin-bottom: 1px; margin-top: 1px"><b>[% koha_new.title %]</b></h5>
-                                        <p style="margin-bottom: 1px; margin-top: 1px">[% koha_new.new.raw %]</p>
+                                        <p style="margin-bottom: 1px; margin-top: 1px">[% koha_new.new %]</p>
                                        <p class="newsfooter" style="font-size: 8pt; font-style:italic; margin-bottom: 1px; margin-top: 1px"> Posted on [% koha_new.newdate %]
 
 </p><hr /></div>
index b1a7bee..30cda46 100644 (file)
@@ -45,7 +45,7 @@ var relatives_borrowernumbers = new Array();
 var MSG_ADD_MESSAGE = _("Add a new message");
 var MSG_EXPORT_SELECT_CHECKOUTS = _("You must select checkout(s) to export");
 
-columns_settings = [% ColumnsSettings.GetColumns( 'members', 'moremember', 'issues-table', 'json' ).raw %]
+columns_settings = [% ColumnsSettings.GetColumns( 'members', 'moremember', 'issues-table', 'json' ) %]
 
 $(document).ready(function() {
     $('#finesholdsissues').tabs({
@@ -180,7 +180,7 @@ function validate1(date) {
                [% END %]
 
                [% IF ( debarredcomment ) %]
-                   with the explanation: <i>[% debarredcomment.raw | html_line_break %]</i>
+                   with the explanation: <i>[% debarredcomment | html_line_break %]</i>
                [% END %]
                 <a href="#reldebarments" onclick="$('#debarments-tab-link').click()">View restrictions</a>
             </li>
@@ -199,11 +199,10 @@ function validate1(date) {
      [% UNLESS ( I ) %][% IF ( othernames ) %]&ldquo;[% othernames %]&rdquo;[% END %]
 
     <div class = "address">
-        [% SWITCH Koha.Preference( 'AddressFormat' ) %]
-            [% CASE 'de' %]
-                [% INCLUDE 'member-display-address-style-de.inc' %]
-            [% CASE # us %]
-                [% INCLUDE 'member-display-address-style-us.inc' %]
+        [% IF Koha.Preference( 'AddressFormat' ) %]
+            [% INCLUDE "member-display-address-style-${ Koha.Preference( 'AddressFormat' ) }.inc" %]
+        [% ELSE %]
+            [% INCLUDE 'member-display-address-style-us.inc' %]
         [% END %]
     </div>
                    
index 2c59cce..f3f9c37 100644 (file)
@@ -58,7 +58,7 @@
                <td>
             <a class="notice-title" href="#">[% QUEUED_MESSAGE.subject %]</a>
             <div class="notice">
-                [% QUEUED_MESSAGE.content.raw FILTER html_line_break %]
+                [% QUEUED_MESSAGE.content FILTER html_line_break %]
             </div>
         </td>
                <td>
index 6c12d98..aebe665 100644 (file)
@@ -57,9 +57,9 @@
                                     <p>
                                         <strong>
                                             [% IF ( CAN_user_catalogue ) %]
-                                                <a href="/cgi-bin/koha/suggestion/suggestion.pl?suggestionid=[% s.suggestionid %]&amp;op=show">[% s.title %]</a>
+                                                <a href="/cgi-bin/koha/suggestion/suggestion.pl?suggestionid=[% s.suggestionid %]&amp;op=show">[% s.title |html %]</a>
                                             [% ELSE %]
-                                                [% s.title %]
+                                                [% s.title |html %]
                                             [% END %]
                                         </strong>
                                     </p>
index 5f31f30..0f3bbe9 100644 (file)
@@ -97,7 +97,7 @@
           <td>
             <span title="[% issue.issuestimestamp %]">[% issue.issuestimestamp | $KohaDates with_hours => 1 %]</span>
           </td>
-          <td><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% issue.biblionumber %]">[% issue.title %]</a></td>
+          <td><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% issue.biblionumber %]">[% issue.title |html %]</a></td>
 
           <td>[% issue.author %]</td>
 
index 0cbc795..33cb95f 100644 (file)
@@ -9,7 +9,7 @@
         [% FOREACH data IN aaData %]
             {
                 "dt_cardnumber":
-                    "[% data.cardnumber %]",
+                    "[% data.cardnumber |html %]",
                 "dt_name":
                     "[% INCLUDE 'patron-title.inc' borrowernumber = data.borrowernumber category_type = data.category_type firstname = data.firstname surname = data.surname othernames = data.othernames cardnumber = data.cardnumber invert_name = 1%]",
                 "dt_dateofbirth":
@@ -17,7 +17,7 @@
                 "dt_address":
                     "[% INCLUDE escape_address data=data %]",
                 "dt_action":
-                    "<a style='cursor:pointer' onclick='select_user(\"[% data.borrowernumber %]\", [% To.json(data) %] );'>Select</a>"
+                    "<a style='cursor:pointer' onclick='select_user(\"[% data.borrowernumber %]\", [% To.json(data) | html %] );'>Select</a>"
             }[% UNLESS loop.last %],[% END %]
         [% END %]
     ]
index 4c0583b..930fdc7 100644 (file)
                     "<input type='checkbox' class='selection' name='borrowernumber' value='[% data.borrowernumber %]' />",
                 [% END %]
                 "dt_cardnumber":
-                    "[% data.cardnumber %]",
+                    "[% data.cardnumber | html %]",
                 "dt_name":
                     "<span style='white-space:nowrap'><a href='/cgi-bin/koha/members/moremember.pl?borrowernumber=[% data.borrowernumber %]'>[% INCLUDE 'patron-title.inc' borrowernumber = data.borrowernumber category_type = data.category_type firstname = data.firstname surname = data.surname othernames = data.othernames invert_name = 1 %]</a><br />[% INCLUDE escape_address data = data %]</span>",
     "dt_dateofbirth":
         "[% data.dateofbirth | $KohaDates %]",
                 "dt_category":
-                    "[% data.category_description %] ([% data.category_type %])",
+                    "[% data.category_description |html %] ([% data.category_type |html %])",
                 "dt_branch":
-                    "[% data.branchname %]",
+                    "[% data.branchname |html %]",
                 "dt_dateexpiry":
                     "[% data.dateexpiry %]",
                 "dt_od_checkouts":
                     "[% IF data.overdues %]<span class='overdue'><strong>[% data.overdues %]</strong></span>[% ELSE %][% data.overdues %][% END %] / [% data.issues %]",
                 "dt_fines":
-                    "<span style='text-align: right; display: block;'>[% IF data.fines < 0 %]<span class='credit'>[% data.fines %]</span> [% ELSIF data.fines > 0 %] <span class='debit'><strong>[% data.fines %]</strong></span> [% ELSE %] [% data.fines %] [% END %]</span>",
+                    "<span style='text-align: right; display: block;'>[% IF data.fines < 0 %]<span class='credit'>[% data.fines |html %]</span> [% ELSIF data.fines > 0 %] <span class='debit'><strong>[% data.fines |html %]</strong></span> [% ELSE %] [% data.fines |html%] [% END %]</span>",
                 "dt_borrowernotes":
                     "[% data.borrowernotes.replace('\\\\' , '\\\\') |html |html_line_break |collapse %]",
                 "dt_action":
index 8bc2d07..714596f 100644 (file)
@@ -80,9 +80,9 @@ function CheckForm(f) {
        </div>
        [% END %]
        [% IF ( message.ERROR_no_borrower_from_item ) %]<p>Warning: Unable to determine patron from item barcode ([% message.badbarcode %]). Cannot check in.</p>[% END %]
-    [% IF ( message.issue ) %]<p>Checked out <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% message.biblionumber %]">[% message.title %]</a> ([% message.barcode %]) to <a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% message.borrowernumber %]">[% message.firstname %] [% message.surname %]</a> ([% message.cardnumber %]): [% message.datetime %]</p>[% END %]
-    [% IF ( message.renew ) %]<p>Renewed <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% message.biblionumber %]">[% message.title %]</a>  ([% message.barcode %]) for <a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% message.borrowernumber %]">[% message.firstname %] [% message.surname %]</a> ([% message.cardnumber %]): [% message.datetime %]</p>[% END %]
-    [% IF ( message.return ) %]<p>Checked in <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% message.biblionumber %]">[% message.title %]</a> ([% message.barcode %]) from <a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% message.borrowernumber %]">[% message.firstname %] [% message.surname %]</a> ([% message.cardnumber %]): [% message.datetime %]</p>[% END %]
+       [% IF ( message.issue ) %]<p>Checked out <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% message.biblionumber %]">[% message.title |html %]</a> ([% message.barcode %]) to <a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% message.borrowernumber %]">[% message.firstname %] [% message.surname %]</a> ([% message.cardnumber %]): [% message.datetime %]</p>[% END %]
+       [% IF ( message.renew ) %]<p>Renewed <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% message.biblionumber %]">[% message.title |html %]</a>  ([% message.barcode %]) for <a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% message.borrowernumber %]">[% message.firstname %] [% message.surname %]</a> ([% message.cardnumber %]): [% message.datetime %]</p>[% END %]
+       [% IF ( message.return ) %]<p>Checked in <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% message.biblionumber %]">[% message.title |html %]</a> ([% message.barcode %]) from <a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% message.borrowernumber %]">[% message.firstname %] [% message.surname %]</a> ([% message.cardnumber %]): [% message.datetime %]</p>[% END %]
        [% IF ( message.payment ) %]<p>Accepted payment ([% message.amount %]) from <a href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% message.borrowernumber %]">[% message.firstname %] [% message.surname %]</a> ([% message.cardnumber %]): [% message.datetime %]</p>[% END %]
   [% END %]
 [% ELSE %]
index c16d6d1..50c7213 100644 (file)
@@ -66,7 +66,7 @@
                             </a>
                         </td>
                         <td>
-                            <a class="btn btn-mini" href="delete.pl?patron_list_id=[% l.patron_list_id %]" onclick='return ConfirmDelete("[% l.name %]")'>
+                            <a class="btn btn-mini" href="delete.pl?patron_list_id=[% l.patron_list_id %]" onclick='return ConfirmDelete("[% l.name | html %]")'>
                                 <i class="fa fa-trash"></i> Delete
                             </a>
                         </td>
index 689c8f4..4916d9e 100644 (file)
                                             <ol>
                                             <li>
                                                 <label for="field_1_text">Text: </label>
-                                                <input type="text" name="field_1_text" id="field_1_text" size="60" value="[% field_1_text %]" />
+                                                <input type="text" name="field_1_text" id="field_1_text" size="60" value="[% field_1_text |html %]" />
                                             </li>
                                             <li>
                                                 <label for="field_1_font">Font: </label>
                                             </li>
                                             <li>
                                                 <label for="field_1_font_size">Font size: </label>
-                                                <input type="text" name="field_1_font_size" id="field_1_font_size" size="2" value="[% field_1_font_size %]" />
+                                                <input type="text" name="field_1_font_size" id="field_1_font_size" size="2" value="[% field_1_font_size |html %]" />
                                                 <span class="font_unit"> pt</span>
                                             </li>
                                             <li>
                                             </li>
                                             <li>
                                                 <label for="field_1_llx">Lower left X coordinate: </label>
-                                                <input type="text" name="field_1_llx" id="field_1_llx" size="2" value="[% field_1_llx %]" />
+                                                <input type="text" name="field_1_llx" id="field_1_llx" size="2" value="[% field_1_llx |html %]" />
                                             </li>
                                             <li>
                                                 <label for="field_1_lly">Lower left Y coordinate: </label>
-                                                <input type="text" name="field_1_lly" id="field_1_lly" size="2" value="[% field_1_lly %]" />
+                                                <input type="text" name="field_1_lly" id="field_1_lly" size="2" value="[% field_1_lly |html %]" />
                                             </li>
                                             </ol>
                                             </div>
                                             <ol>
                                             <li>
                                                 <label for="field_2_text">Text: </label>
-                                                <input type="text" name="field_2_text" id="field_2_text" size="60" value="[% field_2_text %]" />
+                                                <input type="text" name="field_2_text" id="field_2_text" size="60" value="[% field_2_text |html %]" />
                                             </li>
                                             <li>
                                                 <label for="field_2_font">Font: </label>
                                             </li>
                                             <li>
                                                 <label for="field_2_font_size">Font size: </label>
-                                                <input type="text" name="field_2_font_size" id="field_2_font_size" size="2" value="[% field_2_font_size %]" />
+                                                <input type="text" name="field_2_font_size" id="field_2_font_size" size="2" value="[% field_2_font_size |html %]" />
                                                 <span class="font_unit"> pt</span>
                                             </li>
                                             <li>
                                             </li>
                                             <li>
                                                 <label for="field_2_llx">Lower left X coordinate: </label>
-                                                <input type="text" name="field_2_llx" id="field_2_llx" size="2" value="[% field_2_llx %]" />
+                                                <input type="text" name="field_2_llx" id="field_2_llx" size="2" value="[% field_2_llx |html %]" />
                                             </li>
                                             <li>
                                                 <label for="field_2_lly">Lower left Y coordinate: </label>
-                                                <input type="text" name="field_2_lly" id="field_2_lly" size="2" value="[% field_2_lly %]" />
+                                                <input type="text" name="field_2_lly" id="field_2_lly" size="2" value="[% field_2_lly |html %]" />
                                             </li>
                                             </ol>
                                             </div>
                                             <ol>
                                             <li>
                                                 <label for="field_3_text">Text: </label>
-                                                <input type="text" name="field_3_text" id="field_3_text" size="60" value="[% field_3_text %]" />
+                                                <input type="text" name="field_3_text" id="field_3_text" size="60" value="[% field_3_text |html %]" />
                                             </li>
                                             <li>
                                                 <label for="field_3_font">Font: </label>
                                             </li>
                                             <li>
                                                 <label for="field_3_font_size">Font size: </label>
-                                                <input type="text" name="field_3_font_size" id="field_3_font_size" size="2" value="[% field_3_font_size %]" />
+                                                <input type="text" name="field_3_font_size" id="field_3_font_size" size="2" value="[% field_3_font_size |html %]" />
                                                 <span class="font_unit"> pt</span>
                                             </li>
                                             <li>
                                             </li>
                                             <li>
                                                 <label for="field_3_llx">Lower left X coordinate: </label>
-                                                <input type="text" name="field_3_llx" id="field_3_llx" size="2" value="[% field_3_llx %]" />
+                                                <input type="text" name="field_3_llx" id="field_3_llx" size="2" value="[% field_3_llx |html %]" />
                                             </li>
                                             <li>
                                                 <label for="field_3_lly">Lower left Y coordinate: </label>
-                                                <input type="text" name="field_3_lly" id="field_3_lly" size="2" value="[% field_3_lly %]" />
+                                                <input type="text" name="field_3_lly" id="field_3_lly" size="2" value="[% field_3_lly |html %]" />
                                             </li>
                                             </ol>
                                             </div>
                                 <ol>
                                 <li>
                                     <label for="barcode_llx">Lower left X coordinate: </label>
-                                    <input type="text" name="barcode_llx" id="barcode_llx" size="2" value="[% barcode_llx %]" />
+                                    <input type="text" name="barcode_llx" id="barcode_llx" size="2" value="[% barcode_llx |html %]" />
                                 </li>
                                 <li>
                                     <label for="barcode_lly">Lower left Y coordinate: </label>
-                                    <input type="text" name="barcode_lly" id="barcode_lly" size="2" value="[% barcode_lly %]" />
+                                    <input type="text" name="barcode_lly" id="barcode_lly" size="2" value="[% barcode_lly |html %]" />
                                 </li>
                                 <li>
                                     <label for="barcode_height_scale">Scale height (relative to card): </label>
-                                    <input type="text" name="barcode_height_scale" id="barcode_height_scale" size="2" value="[% barcode_height_scale %]" />
+                                    <input type="text" name="barcode_height_scale" id="barcode_height_scale" size="2" value="[% barcode_height_scale |html %]" />
                                 </li>
                                 <li>
                                     <label for="barcode_width_scale">Scale width (relative to card): </label>
-                                    <input type="text" name="barcode_width_scale" id="barcode_width_scale" size="2" value="[% barcode_width_scale %]" />
+                                    <input type="text" name="barcode_width_scale" id="barcode_width_scale" size="2" value="[% barcode_width_scale |html %]" />
                                 </li>
                                 <li>
                                     <label for="barcode_type">Barcode type: </label>
                                     <ol>
                                     <li>
                                         <label for="image_1_Dx">Display height: </label>
-                                        <input type="text" name="image_1_Dx" id="image_1_Dx" size="2" value="[% image_1_Dx %]" />
+                                        <input type="text" name="image_1_Dx" id="image_1_Dx" size="2" value="[% image_1_Dx |html %]" />
                                     </li>
                                     <li>
                                         <label for="image_1_Tx">Lower left X coordinate: </label>
-                                        <input type="text" name="image_1_Tx" id="image_1_Tx" size="2" value="[% image_1_Tx %]" />
+                                        <input type="text" name="image_1_Tx" id="image_1_Tx" size="2" value="[% image_1_Tx |html %]" />
                                     </li>
                                     <li>
                                         <label for="image_1_Ty">Lower left Y coordinate: </label>
-                                        <input type="text" name="image_1_Ty" id="image_1_Ty" size="2" value="[% image_1_Ty %]" />
+                                        <input type="text" name="image_1_Ty" id="image_1_Ty" size="2" value="[% image_1_Ty |html %]" />
                                     </li>
                                     </ol>
                                     </div>
                                     <ol>
                                     <li>
                                         <label for="image_2_Dx">Display height: </label>
-                                        <input type="text" name="image_2_Dx" id="image_2_Dx" size="2" value="[% image_2_Dx %]" />
+                                        <input type="text" name="image_2_Dx" id="image_2_Dx" size="2" value="[% image_2_Dx |html %]" />
                                     </li>
                                     <li>
                                         <label for="image_2_Tx">Lower left X coordinate: </label>
-                                        <input type="text" name="image_2_Tx" id="image_2_Tx" size="2" value="[% image_2_Tx %]" />
+                                        <input type="text" name="image_2_Tx" id="image_2_Tx" size="2" value="[% image_2_Tx |html %]" />
                                     </li>
                                     <li>
                                         <label for="image_2_Ty">Lower left Y coordinate: </label>
-                                        <input type="text" name="image_2_Ty" id="image_2_Ty" size="2" value="[% image_2_Ty %]" />
+                                        <input type="text" name="image_2_Ty" id="image_2_Ty" size="2" value="[% image_2_Ty |html %]" />
                                     </li>
                                     </ol>
                                     </div>
index ae87f69..cbe741b 100644 (file)
@@ -11,9 +11,9 @@
                 "dt_name":
                     "<span style='white-space:nowrap'><a href='/cgi-bin/koha/members/moremember.pl?borrowernumber=[% data.borrowernumber %]'>[% INCLUDE 'patron-title.inc' borrowernumber = data.borrowernumber category_type = data.category_type firstname = data.firstname surname = data.surname othernames = data.othernames cardnumber = data.cardnumber invert_name = 1%]</a></span>",
                 "dt_category":
-                    "[% data.category_description %] ([% data.category_type %])",
+                    "[% data.category_description |html %] ([% data.category_type |html %])",
                 "dt_branch":
-                    "[% data.branchname %]",
+                    "[% data.branchname |html %]",
                 "dt_dateexpiry":
                     "[% data.dateexpiry %]",
                 "dt_borrowernotes":
index a797a17..1655d92 100644 (file)
@@ -571,7 +571,7 @@ canned reports and writing custom SQL reports.</p>
             <td>
                 <select name="[% criteri.name %]_value">
                 [% FOREACH value IN criteri.values %]
-                <option value="[% value.availablevalues %]">[% IF ( value.default ) %]Default[% ELSE %][% value.display_value %][% END %]</option>
+                <option value="[% value.availablevalues %]">[% IF ( value.default ) %]Default[% ELSE %][% value.display_value |html %][% END %]</option>
                 [% END %]
                 </select>
             </td>
@@ -668,7 +668,7 @@ canned reports and writing custom SQL reports.</p>
 <h1>Confirm custom report</h1>
 <p>Your report will be generated with the following SQL statement.</p>
 <p> 
-[% sql %]
+[% sql |html %]
 </p>
 
 <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post">
@@ -684,7 +684,7 @@ canned reports and writing custom SQL reports.</p>
 
 [% IF ( save ) %]
 <form action="/cgi-bin/koha/reports/guided_reports.pl" method="post" class="validated">
-<input type="hidden" name="sql" value="[% sql %]" />
+<input type="hidden" name="sql" value="[% sql |html %]" />
 <input type="hidden" name="type" value="[% type %]" />
 <input type="hidden" name="area" value="[% area %]" />
 <input type="hidden" name="public" value="[% public %]" />
@@ -801,7 +801,7 @@ canned reports and writing custom SQL reports.</p>
 <h1>[% name %]</h1>
 [% IF ( notes ) %]<p>[% notes %]</p>[% END %]
 [% IF ( unlimited_total ) %]<p>Total number of rows matching the (unlimited) query is [% unlimited_total %].</p>[% END %]
-<pre id="sql_output">[% sql %]</pre>
+<pre id="sql_output">[% sql |html %]</pre>
 
 <form action="/cgi-bin/koha/reports/guided_reports.pl" method="get">
     <input type="hidden" name="phase" value="Run this report"/>
@@ -826,7 +826,7 @@ canned reports and writing custom SQL reports.</p>
     <input type="submit" value="Update" />
 </form>
 
-<div class="pages">[% pagination_bar.raw %]</div>
+<div class="pages">[% pagination_bar %]</div>
 [% UNLESS ( errors ) %]
 <table>
 <tr>[% FOREACH header_ro IN header_row %]<th>[% header_ro.cell %]</th>[% END %]</tr>
@@ -844,7 +844,7 @@ canned reports and writing custom SQL reports.</p>
 <option value="tab">Tab separated text</option>
 <option value="ods">Open Document Spreadsheet</option>
 </select>
-<input type="hidden" name="sql" value="[% sql %]" />
+<input type="hidden" name="sql" value="[% sql |html %]" />
 <input type="hidden" name="phase" value="Export" />
 <input type="submit" name="submit" value="Download" /></fieldset>
 <input type="hidden" name="reportname" value="[% name %]" />
index e508e85..52f1cfa 100644 (file)
@@ -39,7 +39,7 @@
             <tr>
                 <th>[% mainloo.line %] / [% mainloo.column %]</th>
                 [% FOREACH loopco IN mainloo.loopcol %]
-                    <th>[% loopco.coltitle_display %]</th>
+                    <th>[% loopco.coltitle_display |html %]</th>
                 [% END %]
                 <th>TOTAL</th>
                 </tr>
@@ -49,7 +49,7 @@
                     [% ELSE %]
                     <tr class="highlight">
                     [% END %]
-                        <td>[% loopro.rowtitle_display or "UNKNOWN VALUE" %]</td>
+                        <td>[% loopro.rowtitle_display or "UNKNOWN VALUE" |html %]</td>
                     [% FOREACH loopcel IN loopro.loopcell %]
                                                <td>[% loopcel.value %]</td>
                     [% END %]
index f3c5a65..e72f446 100644 (file)
@@ -9,7 +9,7 @@
 <script type='text/javascript'>
 //<![CDATA[
     $(document).ready(function() {
-        var columns_settings = [% ColumnsSettings.GetColumns( 'reports', 'lostitems', 'lostitems-table', 'json' ).raw %];
+        var columns_settings = [% ColumnsSettings.GetColumns( 'reports', 'lostitems', 'lostitems-table', 'json' ) %];
         var lostitems_table = KohaTable("#lostitems-table", {
             "sDom": 'C<"clearfix">t',
             "aaSorting": [],
@@ -72,7 +72,7 @@
                 [% FOREACH itemsloo IN itemsloop %]
                     <tr>
                         <td>
-                            <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% itemsloo.biblionumber %]" title="[% itemsloo.itemnotes %]">[% itemsloo.title %]</a>
+                            <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% itemsloo.biblionumber %]" title="[% itemsloo.itemnotes %]">[% itemsloo.title |html %]</a>
                         </td>
                         <td>[% itemsloo.author %]</td>
                         <td>[% itemsloo.lib %]</td>
index b858345..641cbc6 100644 (file)
             <tr>
                 <th>[% mainloo.line %] / [% mainloo.column %]</th>
                 [% FOREACH loopco IN mainloo.loopcol %]
-                    <th>[% loopco.coltitle_display %]</th>
+                    <th>[% loopco.coltitle_display |html %]</th>
                 [% END %]
                 <th>TOTAL</th>
                 </tr>
                     [% ELSE %]
                     <tr class="highlight">
                     [% END %]
-                        <td>[% loopro.rowtitle_display or "UNKNOWN VALUE" %]</td>
+                        <td>[% loopro.rowtitle_display or "UNKNOWN VALUE" |html %]</td>
                     [% FOREACH loopcel IN loopro.loopcell %]
                                                <td align="center">
                                                [% IF ( loopcel.url_complement ) %]<a href="reserves_stats.pl?output=[% loopcel.output %]&amp;[% loopcel.url_complement %]">[% loopcel.value %]</a>[% ELSE %][% loopcel.value %][% END %]
index 57f13ac..6e7b8ab 100644 (file)
@@ -52,7 +52,7 @@
                        <tr>
                                [% FOREACH data IN datas %]
                     <td><a href="/cgi-bin/koha/acqui/supplier.pl?booksellerid=[% data.aqbooksellerid %]">[% data.name %]</a></td>
-                    <td><a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% data.subscriptionid %]">[% data.title %]</a></td>
+                    <td><a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% data.subscriptionid %]">[% data.title |html %]</a></td>
                                        <td>[% data.subscriptionid %]</td>
                     <td>[% Branches.GetName( data.branchcode ) %]</td>
                                        <td>[% data.callnumber %]</td>
index 5e6230a..85f687a 100644 (file)
@@ -2,7 +2,7 @@
 [% USE KohaDates %]
 [% INCLUDE 'doc-head-open.inc' %]
 [% UNLESS ( multi_hold ) %]
-    <title>Koha &rsaquo; Circulation &rsaquo; Holds &rsaquo; Place a hold on [% title %]</title>
+    <title>Koha &rsaquo; Circulation &rsaquo; Holds &rsaquo; Place a hold on [% title |html %]</title>
 [% ELSE %]
     <title>Koha &rsaquo; Circulation &rsaquo; Holds &rsaquo; Confirm holds</title>
 [% END %]
@@ -211,7 +211,7 @@ function checkMultiHold() {
 [% INCLUDE 'circ-search.inc' %]
 
 [% UNLESS ( multi_hold ) %]
-    <div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/catalogue/search.pl">Catalog</a> &rsaquo; <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% biblionumber %]">[% title %]</a> &rsaquo; Place a hold on [% title %]</div>
+    <div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/catalogue/search.pl">Catalog</a> &rsaquo; <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% biblionumber %]">[% title |html %]</a> &rsaquo; Place a hold on [% title |html %]</div>
 [% ELSE %]
     <div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/catalogue/search.pl">Catalog</a> &rsaquo; Confirm holds</div>
 [% END %]
@@ -243,7 +243,7 @@ function checkMultiHold() {
   [% END %]
 
   [% UNLESS ( multi_hold ) %]
-    <h1>Place a hold on [% INCLUDE 'biblio-default-view.inc' %][% title %]</a></h1>
+    <h1>Place a hold on [% INCLUDE 'biblio-default-view.inc' %][% title |html %]</a></h1>
   [% ELSE %]
     <h1>Confirm holds</h1>
   [% END %]
@@ -371,12 +371,12 @@ function checkMultiHold() {
             <input type="hidden" name="bad_bibs" id="bad_bibs" value=""/>
             <input type="hidden" name="request" value="any"/>
             [% FOREACH biblioloo IN biblioloop %]
-              <input type="hidden" name="title_[% biblioloo.biblionumber %]" value="[% biblioloo.title %]"/>
+              <input type="hidden" name="title_[% biblioloo.biblionumber %]" value="[% biblioloo.title |html %]"/>
               <input type="hidden" name="rank_[% biblioloo.biblionumber %]" value="[% biblioloo.rank %]"/>
             [% END %]
         [% ELSE %]
             <input type="hidden" name="biblionumber" value="[% biblionumber %]" />
-            <input type="hidden" name="title" value="[% title %]" />
+            <input type="hidden" name="title" value="[% title |html %]" />
             <input type="hidden" name="rank-request" value="[% fixedRank %]" />
         [% END %]
 
@@ -582,7 +582,7 @@ function checkMultiHold() {
         [% END %]
           <td>
             <ul>
-              <li><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% biblioloo.biblionumber %]">[% biblioloo.title %]</a></li>
+              <li><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% biblioloo.biblionumber %]">[% biblioloo.title |html %]</a></li>
               [% IF ( biblioloo.publicationyear ) %]
                 <li><span class="label">Publication year:</span> [% biblioloo.publicationyear %]</li>
               [% END %]
@@ -661,7 +661,7 @@ function checkMultiHold() {
     [% IF ( biblioloo.reserveloop ) %]
     <table>
       [% IF ( multi_hold ) %]
-          <caption><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% biblioloo.biblionumber %]">[% biblioloo.title %]</a></caption>
+          <caption><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% biblioloo.biblionumber %]">[% biblioloo.title |html %]</a></caption>
       [% END %]
       <tr>
         [% IF ( CAN_user_reserveforothers_modify_holds_priority ) %]
index d680871..b609d83 100644 (file)
@@ -50,7 +50,7 @@
             <a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% review.biblionumber %]">[% review.bibliotitle %]</a>
         </td>
         <td>
-            [% review.review %]
+            [% review.review |html %]
         </td>
         <td>
             [% IF ( status ) %]<a href="/cgi-bin/koha/reviews/reviewswaiting.pl?op=unapprove&amp;reviewid=[% review.reviewid %]">Unapprove</a>[% ELSE %]<a href="/cgi-bin/koha/reviews/reviewswaiting.pl?op=approve&amp;reviewid=[% review.reviewid %]">Approve</a>[% END %] |
@@ -59,7 +59,7 @@
     </tr>
     [% END %]</tbody>
 </table>
- <div class="pages">[% pagination_bar.raw %]</div>
+ <div class="pages">[% pagination_bar %]</div>
 [% ELSE %]
 [% IF ( status ) %]<p><b>No comments have been approved.</b></p>[% ELSE %]<p><b>No comments to moderate.</b></p>[% END %]
 [% END %]
index a5c09c2..43d4a8b 100644 (file)
                     </tr>
                     [% FOREACH collectionItemsLoo IN collectionItemsLoop %]
                       <tr>
-                        <td>[% INCLUDE 'biblio-default-view.inc' biblionumber = collectionItemsLoo.biblionumber %][% collectionItemsLoo.title %]</a></td>
+                        <td>[% INCLUDE 'biblio-default-view.inc' biblionumber = collectionItemsLoo.biblionumber %][% collectionItemsLoo.title |html %]</a></td>
                         <td>[% collectionItemsLoo.itemcallnumber %]</td>
                         <td>[% collectionItemsLoo.barcode %]</td>
                         <td><a href="/cgi-bin/koha/rotating_collections/addItems.pl?colId=[% colId %]&amp;barcode=[% collectionItemsLoo.barcode %]&amp;removeItem=1&amp;action=addItem">Remove</a></td>
index 0f0a841..a7f847b 100644 (file)
         <ol>
           <li>
             <label for="name" class="required">Name: </label>
-            <input type="text" name="name" id="name" value="[% field.name %]" />
+            <input type="text" name="name" id="name" value="[% field.name | html %]" />
           </li>
           <li>
             <label for="av">Authorised value category: </label>
           </li>
           <li>
             <label for="marcfield">Marc field: </label>
-            <input type="text" name="marcfield" id="marcfield" value="[% field.marcfield %]" />
+            <input type="text" name="marcfield" id="marcfield" value="[% field.marcfield| html %]" />
           </li>
           <li>
             <label for="searchable">Searchable: </label>
index 31e95e9..657f91d 100644 (file)
                 [% subscriptions_loo.issn %]
             </td>
             <td><a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% subscriptions_loo.subscriptionid |url %]">[% IF ( subscriptions_loo.title ) %]
-                    [% subscriptions_loo.title %]
+                    [% subscriptions_loo.title |html %]
                 [% ELSE %]
                     |
                 [% END %]
index 52996f7..dd77a73 100644 (file)
                             <span class="branch-[% missingissue.branchcode %]">[% Branches.GetName( missingissue.branchcode ) %]</span>
                         </td>
                         <td>
-                        <a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% missingissue.subscriptionid %]">[% missingissue.title %]</a>
+                        <a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% missingissue.subscriptionid %]">[% missingissue.title |html %]</a>
                         </td>
                         <td>[% missingissue.issn %]</td>
                         <td>[% missingissue.serialseq %]</td>
index 0c6f574..11ecd18 100644 (file)
@@ -32,19 +32,19 @@ function GetIt(bibno,title)
     </tr>
     [% FOREACH resultsloo IN resultsloop %]
         <tr>
-            <td class="title">[% resultsloo.title %] [% resultsloo.subtitle %]
+            <td class="title">[% resultsloo.title |html %] [% resultsloo.subtitle |html %]
             </td>
             <td>
-                [% resultsloo.author %]
+                [% resultsloo.author |html %]
             </td>
             <td>
-                [% resultsloo.publishercode %]
+                [% resultsloo.publishercode |html %]
             </td>
             <td>
-                [% resultsloo.publicationyear %]
+                [% resultsloo.publicationyear |html %]
             </td>
             <td>
-                [% resultsloo.issn %]
+                [% resultsloo.issn |html %]
             </td>
 
                        <td><a href="#" onclick="GetIt('[% resultsloo.biblionumber %]',$(this));" title="Choose this record">Choose</a></td>
index ea8e174..5a23158 100644 (file)
@@ -19,7 +19,7 @@
         <td colspan="2"><h3>[% libraryname %]</h3></td>
     </tr>
     <tr>
-        <td colspan="2"><b>Title:</b> [% title %]<br />[% issue %]</td>
+        <td colspan="2"><b>Title:</b> [% title |html %]<br />[% issue %]</td>
     </tr>
     <tr>
         <td><b>Name</b></td>
index 9438684..6892e1c 100644 (file)
@@ -16,7 +16,7 @@ function print_slip(subscriptionid,issue){
 [% INCLUDE 'header.inc' %]
 [% INCLUDE 'serials-search.inc' %]
 
-<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/serials/serials-home.pl">Serials</a> &rsaquo; <a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% subscriptionid %]"><i>[% title %]</i></a> &rsaquo; Preview routing list</div>
+<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/serials/serials-home.pl">Serials</a> &rsaquo; <a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% subscriptionid %]"><i>[% title |html %]</i></a> &rsaquo; Preview routing list</div>
 
 <div id="doc3" class="yui-t2">
    
@@ -24,7 +24,7 @@ function print_slip(subscriptionid,issue){
        <div id="yui-main">
        <div class="yui-b">
 
-<h2>Preview routing list for <i>[% title %]</i></h2>
+<h2>Preview routing list for <i>[% title |html %]</i></h2>
 
 <form method="post" action="routing-preview.pl">
 <input type="hidden" name="subscriptionid" value="[% subscriptionid %]" />
index b1a7372..6fccab8 100644 (file)
@@ -1,5 +1,5 @@
 [% INCLUDE 'doc-head-open.inc' %]
-<title>Koha &rsaquo; Serials &rsaquo; [% title %] &rsaquo; [% IF ( op ) %]Create Routing List[% ELSE %]Edit routing list[% END %]</title>
+<title>Koha &rsaquo; Serials &rsaquo; [% title |html %] &rsaquo; [% IF ( op ) %]Create Routing List[% ELSE %]Edit routing list[% END %]</title>
 [% INCLUDE 'doc-head-close.inc' %]
 <script type="text/javascript">
 <!--
@@ -29,7 +29,7 @@ function reorder_item(sid,rid,rank){
 [% INCLUDE 'header.inc' %]
 [% INCLUDE 'serials-search.inc' %]
 
-<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/serials/serials-home.pl">Serials</a> &rsaquo; <a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% subscriptionid %]"><i>[% title %]</i></a> &rsaquo; [% IF ( op ) %]Create Routing List[% ELSE %]Edit routing list[% END %]</div>
+<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/serials/serials-home.pl">Serials</a> &rsaquo; <a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% subscriptionid %]"><i>[% title |html %]</i></a> &rsaquo; [% IF ( op ) %]Create Routing List[% ELSE %]Edit routing list[% END %]</div>
 
 <div id="doc3" class="yui-t2">
    
@@ -39,9 +39,9 @@ function reorder_item(sid,rid,rank){
 
 
 [% IF ( op ) %]
-<h1>Create routing list for <i>[% title %]</i></h1>
+<h1>Create routing list for <i>[% title |html %]</i></h1>
 [% ELSE %]
-<h1>Edit routing list for <i>[% title %]</i></h1>
+<h1>Edit routing list for <i>[% title |html %]</i></h1>
 [% END %]
 
 <form method="post" action="routing.pl">
index 85646d9..bf1dc7a 100644 (file)
@@ -303,7 +303,7 @@ $(document).ready(function() {
                 </td>
                 [% IF ( routing ) %]
                 <td>
-                    <a href="" onclick="print_slip([% serial.subscriptionid %], '[% serial.serialseq.replace("'", "\\'") %] ([% serial.publisheddate | $KohaDates %])'); return false" >Print list</a>
+                    <a href="" onclick="print_slip([% serial.subscriptionid |html %], '[% serial.serialseq.replace("'", "\\'") |html %] ([% serial.publisheddate | $KohaDates %])'); return false" >Print list</a>
                 </td>
                 [% END %]
             </tr>
index d4a7708..8a4081a 100644 (file)
@@ -233,9 +233,9 @@ $(document).ready(function() {
         <ol>[% FOREACH iteminformatio IN item.iteminformation %]<li>
                <div class="subfield_line" style="[% iteminformatio.hidden %]" id="subfield[% item.serialid %][% item.countitems %][% iteminformatio.subfield %][% iteminformatio.random %]">
                 [% IF (iteminformatio.mandatory) %]
-                    <label class="required">[% iteminformatio.subfield %] - [% iteminformatio.marc_lib.raw %]</label>
+                    <label class="required">[% iteminformatio.subfield %] - [% iteminformatio.marc_lib %]</label>
                 [% ELSE %]
-                    <label>[% iteminformatio.subfield %] - [% iteminformatio.marc_lib.raw %]</label>
+                    <label>[% iteminformatio.subfield %] - [% iteminformatio.marc_lib %]</label>
                 [% END %]
                 [% IF ( iteminformatio.marc_value.type == 'select' ) %]
                   <select name="field_value" size="1">
@@ -248,7 +248,7 @@ $(document).ready(function() {
                   [% END %]
                   </select>
                 [% ELSE %]
-                [% iteminformatio.marc_value.raw %]
+                [% iteminformatio.marc_value %]
                 [% END %]
                 <input type="hidden" name="itemid" value="[% item.itemid %]" />
                 <input type="hidden" name="kohafield" value="[% iteminformatio.kohafield %]" />
@@ -379,9 +379,9 @@ $(document).ready(function() {
         <ol>[% FOREACH iteminformatio IN newserialloo.iteminformation %]<li>
                <div class="subfield_line" style="[% iteminformatio.hidden %]" id="subfield[% newserialloo.serialid %][% newserialloo.countitems %][% iteminformatio.subfield %][% iteminformatio.random %]">
                 [% IF (iteminformatio.mandatory) %]
-                    <label class="required">[% iteminformatio.subfield %] - [% iteminformatio.marc_lib.raw %]</label>
+                    <label class="required">[% iteminformatio.subfield %] - [% iteminformatio.marc_lib %]</label>
                 [% ELSE %]
-                    <label>[% iteminformatio.subfield %] - [% iteminformatio.marc_lib.raw %]</label>
+                    <label>[% iteminformatio.subfield %] - [% iteminformatio.marc_lib %]</label>
                 [% END %]
                 [% IF ( iteminformatio.marc_value.type == 'select' ) %]
                   <select name="field_value" size="1">
@@ -394,7 +394,7 @@ $(document).ready(function() {
                   [% END %]
                   </select>
                 [% ELSE %]
-                [% iteminformatio.marc_value.raw %]
+                [% iteminformatio.marc_value %]
                 [% END %]
                 <input type="hidden" name="itemid" value="[% newserialloo.itemid %]" />
                 <input type="hidden" name="kohafield" value="[% iteminformatio.kohafield %]" />
index 7f407dd..be67cfa 100644 (file)
               <ol>
                 <li>
                   <label for="issn">ISSN:</label>
-                  <input type="text" id="issn" name="ISSN_filter" value="[% ISSN_filter %]" />
+                  <input type="text" id="issn" name="ISSN_filter" value="[% ISSN_filter | html %]" />
                 </li>
                 <li>
                   <label for="title">Title:</label>
-                  <input type="text" id="title" name="title_filter" value="[% title_filter %]" />
+                  <input type="text" id="title" name="title_filter" value="[% title_filter | html %]" />
                 </li>
                 [% IF ( marcflavour == "UNIMARC" ) %]
                 <li>
                   <label for="ean">EAN:</label>
-                  <input type="text" id="ean" name="EAN_filter" value="[% EAN_filter %]" />
+                  <input type="text" id="ean" name="EAN_filter" value="[% EAN_filter | html %]" />
                 </li>
                 [% END %]
                 <li>
                   <label for="callnumber">Call number:</label>
-                  <input type="text" id="callnumber" name="callnumber_filter" value="[% callnumber_filter %]" />
+                  <input type="text" id="callnumber" name="callnumber_filter" value="[% callnumber_filter | html %]" />
                 </li>
                 <li>
                   <label for="publisher">Publisher:</label>
-                  <input type="text" id="publisher" name="publisher_filter" value="[% publisher_filter %]" />
+                  <input type="text" id="publisher" name="publisher_filter" value="[% publisher_filter | html %]" />
                 </li>
                 <li>
                   <label for="bookseller">Vendor:</label>
-                  <input type="text" id="bookseller" name="bookseller_filter" value="[% bookseller_filter %]" />
+                  <input type="text" id="bookseller" name="bookseller_filter" value="[% bookseller_filter | html %]" />
                 </li>
                 <li>
                   <label for="branch">Library:</label>
                         [% IF ( subscription.issn ) %][% subscription.issn %]
                         [% END %]
                         </td>
-                        <td><a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% subscription.subscriptionid %]" class="button" title="subscription detail">[% subscription.title %]</a>
+                        <td><a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% subscription.subscriptionid %]" class="button" title="subscription detail">[% subscription.title |html %]</a>
                         </td>
                         <td>[% IF ( subscription.publicnotes ) %][% subscription.publicnotes %][% END %]
                         [% IF ( subscription.internalnotes ) %]([% subscription.internalnotes %])[% END %]
                           [% END %]
                         </td>
                         <td>
-                          <a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% subscription.subscriptionid %]" class="button" title="subscription detail">[% subscription.title %]</a>
+                          <a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% subscription.subscriptionid %]" class="button" title="subscription detail">[% subscription.title |html %]</a>
                         </td>
                         <td>
                           [% IF ( subscription.notes ) %][% subscription.notes %][% END %]
               <ol>
                 <li>
                   <label for="issn">ISSN:</label>
-                  <input type="text" id="issn" name="ISSN_filter" value="[% ISSN_filter %]" />
+                  <input type="text" id="issn" name="ISSN_filter" value="[% ISSN_filter | html %]" />
                 </li>
                 <li>
                   <label for="title">Title:</label>
-                  <input type="text" id="title" name="title_filter" value="[% title_filter %]" />
+                  <input type="text" id="title" name="title_filter" value="[% title_filter | html %]" />
                 </li>
                 [% IF ( marcflavour == "UNIMARC" ) %]
                 <li>
                   <label for="ean">EAN:</label>
-                  <input type="text" id="ean" name="EAN_filter" value="[% EAN_filter %]" />
+                  <input type="text" id="ean" name="EAN_filter" value="[% EAN_filter | html %]" />
                 </li>
                 [% END %]
                 <li>
                   <label for="callnumber">Call number:</label>
-                  <input type="text" id="callnumber" name="callnumber_filter" value="[% callnumber_filter %]" />
+                  <input type="text" id="callnumber" name="callnumber_filter" value="[% callnumber_filter | html %]" />
                 </li>
                 <li>
                   <label for="publisher">Publisher:</label>
-                  <input type="text" id="publisher" name="publisher_filter" value="[% publisher_filter %]" />
+                  <input type="text" id="publisher" name="publisher_filter" value="[% publisher_filter | html %]" />
                 </li>
                 <li>
                   <label for="bookseller">Vendor:</label>
-                  <input type="text" id="bookseller" name="bookseller_filter" value="[% bookseller_filter %]" />
+                  <input type="text" id="bookseller" name="bookseller_filter" value="[% bookseller_filter | html %]" />
                 </li>
                 <li>
                   <label for="branch">Library:</label>
index cc2575c..39c809c 100644 (file)
@@ -1,7 +1,7 @@
 [% USE KohaDates %]
 
 [% INCLUDE 'doc-head-open.inc' %]
-<title>Koha &rsaquo; Serials &rsaquo; [% IF ( modify ) %][% bibliotitle %] &rsaquo; Modify subscription[% ELSE %]New subscription[% END %]</title>
+<title>Koha &rsaquo; Serials &rsaquo; [% IF ( modify ) %][% bibliotitle |html %] &rsaquo; Modify subscription[% ELSE %]New subscription[% END %]</title>
 [% INCLUDE 'doc-head-close.inc' %]
 [% INCLUDE 'calendar.inc' %]
 <style type="text/css">
@@ -468,12 +468,12 @@ $(document).ready(function() {
 [% INCLUDE 'header.inc' %]
 [% INCLUDE 'serials-search.inc' %]
 
-<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/serials/serials-home.pl">Serials</a> &rsaquo; [% IF ( modify ) %]<a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% subscriptionid %]"><i>[% bibliotitle %]</i></a> &rsaquo; Modify subscription[% ELSE %]New subscription[% END %]</div>
+<div id="breadcrumbs"><a href="/cgi-bin/koha/mainpage.pl">Home</a> &rsaquo; <a href="/cgi-bin/koha/serials/serials-home.pl">Serials</a> &rsaquo; [% IF ( modify ) %]<a href="/cgi-bin/koha/serials/subscription-detail.pl?subscriptionid=[% subscriptionid %]"><i>[% bibliotitle |html %]</i></a> &rsaquo; Modify subscription[% ELSE %]New subscription[% END %]</div>
 
 <div id="doc3" class="yui-t7">
     <div id="bd">
         <div class="yui-g">
-            <h1>[% IF ( modify ) %] Modify subscription for <i>[% bibliotitle %]</i>[% ELSE %]Add a new subscription[% END %] (<span id="page_number">1/2</span>)</h1>
+            <h1>[% IF ( modify ) %] Modify subscription for <i>[% bibliotitle |html %]</i>[% ELSE %]Add a new subscription[% END %] (<span id="page_number">1/2</span>)</h1>
             <form method="post" name="f" action="/cgi-bin/koha/serials/subscription-add.pl" class="validated" onsubmit="return Check_page2();" >
                 [% IF ( modify ) %]
                     <input type="hidden" name="op" value="modsubscription" />
index 9dfda24..6c710e8 100644 (file)
@@ -26,7 +26,7 @@
                 <option value="">All</option>
                 [%- FOREACH itemtypeloo IN itemtypeloop %]
                 <option value="[% itemtypeloo.code %]">
-                    [% itemtypeloo.description %]
+                    [% itemtypeloo.description |html %]
                 </option>
                 [%- END %]
             </select>
@@ -38,7 +38,7 @@
                 <option value="">All</option>
                 [%- FOREACH ccodeloo IN ccodeloop %]
                 <option value="[% ccodeloo.code %]">
-                    [% ccodeloo.description %]
+                    [% ccodeloo.description |html %]
                 </option>
                 [%- END %]
             </select>
index b71df6e..abb228e 100644 (file)
@@ -11,7 +11,7 @@
                 "dt_name":
                     "<span style='white-space:nowrap'><a href='/cgi-bin/koha/members/moremember.pl?borrowernumber=[% data.borrowernumber %]'>[% INCLUDE 'patron-title.inc' borrowernumber = data.borrowernumber category_type = data.category_type firstname = data.firstname surname = data.surname othernames = data.othernames cardnumber = data.cardnumber invert_name = 1%]</a></span>",
                 "dt_branch":
-                    "[% data.branchname %]",
+                    "[% data.branchname |html %]",
                 "dt_action":
                     "<a style='cursor:pointer' onclick='add_user(\"[% data.borrowernumber %]\", \"[% data.firstname %] [% data.surname %]\"); return false;'>Add</a>"
             }[% UNLESS loop.last %],[% END %]
index d738b06..d55268a 100644 (file)
@@ -7,9 +7,9 @@
     [% END %]
       <div class="subfield_line" id="subfield[% iteminfo.serialid %][% iteminfo.countitems %][% iteminfo.subfield %][% iteminfo.random %]">
         [% IF (iteminfo.mandatory) %]
-            <label class="required">[% iteminfo.subfield %] - [% iteminfo.marc_lib.raw %]</label>
+            <label class="required">[% iteminfo.subfield %] - [% iteminfo.marc_lib %]</label>
         [% ELSE %]
-            <label>[% iteminfo.subfield %] - [% iteminfo.marc_lib.raw %]</label>
+            <label>[% iteminfo.subfield %] - [% iteminfo.marc_lib %]</label>
         [% END %]
         [% IF ( iteminfo.marc_value.type == 'select' ) %]
         <select name="field_value" size="1">
@@ -22,7 +22,7 @@
         [% END %]
         </select>
         [% ELSE %]
-        [% iteminfo.marc_value.raw %]
+        [% iteminfo.marc_value %]
         [% END %]
         <input type="hidden" name="itemid" value="1" />
         <input type="hidden" name="kohafield" value="[% iteminfo.kohafield %]" />
index 92389ac..547265d 100644 (file)
@@ -205,13 +205,13 @@ h4.local_collapse a { font-size : 80%; text-decoration: none; } fieldset.brief o
     <fieldset class="rows">
       <legend>Bibliographic information</legend>
       <ol>
-        <li><span class="label">Title:</span>[% title %]</li>
-        <li><span class="label">Author:</span>[% author %]</li>
-        <li><span class="label">Copyright date:</span>[% copyrightdate %]</li>
-        <li><span class="label">ISBN or ISSN or other standard number:</span>[% isbn %]</li>
-        <li><span class="label">Publisher:</span>[% publishercode %]</li>
-        <li><span class="label">Publication place:</span>[% place %]</li>
-        <li><span class="label">Collection title:</span>[% collectiontitle %]</li>
+        <li><span class="label">Title:</span>[% title |html %]</li>
+        <li><span class="label">Author:</span>[% author |html %]</li>
+        <li><span class="label">Copyright date:</span>[% copyrightdate |html %]</li>
+        <li><span class="label">ISBN or ISSN or other standard number:</span>[% isbn |html %]</li>
+        <li><span class="label">Publisher:</span>[% publishercode |html %]</li>
+        <li><span class="label">Publication place:</span>[% place |html %]</li>
+        <li><span class="label">Collection title:</span>[% collectiontitle |html %]</li>
         <li><span class="label">Document type:</span>
             [% AuthorisedValues.GetByCode( 'SUGGEST_FORMAT', itemtype, 0 ) %]
         </li>
@@ -222,7 +222,7 @@ h4.local_collapse a { font-size : 80%; text-decoration: none; } fieldset.brief o
             [% END %]
           </li>
         [% END %]
-        <li><span class="label">Notes:</span>[% note %]</li>
+        <li><span class="label">Notes:</span>[% note |html %]</li>
       </ol>
     </fieldset>
     <fieldset class="rows"> <legend>Suggestion management</legend>
@@ -324,15 +324,15 @@ h4.local_collapse a { font-size : 80%; text-decoration: none; } fieldset.brief o
     <fieldset class="rows"> <legend>Bibliographic information</legend><ol>
         <li>
             <label for="title" class="required">Title:</label>
-            <input type="text" id="title" name="title" size="80" maxlength="255" value="[% title %]" required="required" class="required" />
+            <input type="text" id="title" name="title" size="80" maxlength="255" value="[% title |html %]" required="required" class="required" />
             <span class="required">Required</span>
         </li>
-        <li><label for="author">Author:</label><input type="text" id="author" name="author" size="50" maxlength="80" value="[% author %]"/></li>
-        <li><label for="copyrightdate">Copyright date:</label><input type="text" id="copyrightdate" name="copyrightdate" size="4" maxlength="4" value="[% copyrightdate %]" /></li>
-        <li><label for="isbn">ISBN or ISSN or other standard number:</label><input type="text" id="isbn" name="isbn" size="50" maxlength="80" value="[% isbn %]"/></li>
-        <li><label for="publishercode">Publisher:</label><input type="text" id="publishercode" name="publishercode" size="50" maxlength="80" value="[% publishercode %]"/></li>
-        <li><label for="place">Publication place:</label><input type="text" id="place" name="place" size="50" maxlength="80" value="[% place %]"/></li>
-        <li><label for="collectiontitle">Collection title:</label><input type="text" id="collectiontitle" name="collectiontitle" size="50" maxlength="80" value="[% collectiontitle %]"/></li>
+        <li><label for="author">Author:</label><input type="text" id="author" name="author" size="50" maxlength="80" value="[% author | html %]"/></li>
+        <li><label for="copyrightdate">Copyright date:</label><input type="text" id="copyrightdate" name="copyrightdate" size="4" maxlength="4" value="[% copyrightdate | html %]" /></li>
+        <li><label for="isbn">ISBN or ISSN or other standard number:</label><input type="text" id="isbn" name="isbn" size="50" maxlength="80" value="[% isbn | html %]"/></li>
+        <li><label for="publishercode">Publisher:</label><input type="text" id="publishercode" name="publishercode" size="50" maxlength="80" value="[% publishercode | html %]"/></li>
+        <li><label for="place">Publication place:</label><input type="text" id="place" name="place" size="50" maxlength="80" value="[% place | html %]"/></li>
+        <li><label for="collectiontitle">Collection title:</label><input type="text" id="collectiontitle" name="collectiontitle" size="50" maxlength="80" value="[% collectiontitle | html %]"/></li>
         <li><label for="itemtype">Document type:</label>
             [% PROCESS 'av-build-dropbox.inc' name="itemtype", category="SUGGEST_FORMAT", size = 20, default=itemtype %]
         </li>
@@ -514,12 +514,12 @@ h4.local_collapse a { font-size : 80%; text-decoration: none; } fieldset.brief o
                 </td>
                 <td>
                     <a href="suggestion.pl?suggestionid=[% suggestions_loo.suggestionid %]&amp;op=show" title="suggestion" >
-                        [% suggestions_loo.title %][% IF ( suggestions_loo.author ) %], by [% suggestions_loo.author %][% END %]</a>
+                        [% suggestions_loo.title |html %][% IF ( suggestions_loo.author ) %], by [% suggestions_loo.author %][% END %]</a>
                     [<a href="suggestion.pl?suggestionid=[% suggestions_loo.suggestionid %]&amp;op=edit" title="suggestion" >edit</a>]
                     <br />
-                    [% IF ( suggestions_loo.copyrightdate ) %]&copy; [% suggestions_loo.copyrightdate %] [% END %]
-                        [% IF ( suggestions_loo.volumedesc ) %]; Volume:<i>[% suggestions_loo.volumedesc %]</i> [% END %]
-                        [% IF ( suggestions_loo.isbn ) %]; ISBN:<i>[% suggestions_loo.isbn %]</i> [% END %][% IF ( suggestions_loo.publishercode ) %]; Published by [% suggestions_loo.publishercode %] [% END %][% IF ( suggestions_loo.publicationyear ) %] in <i>[% suggestions_loo.publicationyear %]</i> [% END %][% IF ( suggestions_loo.place ) %] in <i>[% suggestions_loo.place %]</i> [% END %][% IF ( suggestions_loo.collectiontitle ) %]; [% suggestions_loo.collectiontitle %] [% END %][% IF ( suggestions_loo.itemtype ) %]; [% AuthorisedValues.GetByCode( 'SUGGEST_FORMAT', suggestions_loo.itemtype, 0 ) %] [% END %]<br />[% IF ( suggestions_loo.note ) %]<span class="note">[% suggestions_loo.note %]</span>[% END %]
+                    [% IF ( suggestions_loo.copyrightdate ) %]&copy; [% suggestions_loo.copyrightdate |html %] [% END %]
+                        [% IF ( suggestions_loo.volumedesc ) %]; Volume:<i>[% suggestions_loo.volumedesc |html %]</i> [% END %]
+                        [% IF ( suggestions_loo.isbn ) %]; ISBN:<i>[% suggestions_loo.isbn |html %]</i> [% END %][% IF ( suggestions_loo.publishercode ) %]; Published by [% suggestions_loo.publishercode |html %] [% END %][% IF ( suggestions_loo.publicationyear ) %] in <i>[% suggestions_loo.publicationyear |html %]</i> [% END %][% IF ( suggestions_loo.place ) %] in <i>[% suggestions_loo.place |html %]</i> [% END %][% IF ( suggestions_loo.collectiontitle ) %]; [% suggestions_loo.collectiontitle |html %] [% END %][% IF ( suggestions_loo.itemtype ) %]; [% AuthorisedValues.GetByCode( 'SUGGEST_FORMAT', suggestions_loo.itemtype, 0 ) %] [% END %]<br />[% IF ( suggestions_loo.note ) %]<span class="note">[% suggestions_loo.note |html%]</span>[% END %]
                 </td>
                 <td>
                     [% IF ( suggestions_loo.emailsuggestedby ) %]<a href="mailto:[% suggestions_loo.emailsuggestedby %]">[% END %][% suggestions_loo.surnamesuggestedby %][% IF ( suggestions_loo.firstnamesuggestedby ) %], [% suggestions_loo.firstnamesuggestedby %][% END %] [% IF (suggestions_loo.cardnumbersuggestedby ) %]([% suggestions_loo.cardnumbersuggestedby %])[% END %] [% IF ( suggestions_loo.emailsuggestedby ) %]</a>[% END %]
@@ -664,12 +664,12 @@ h4.local_collapse a { font-size : 80%; text-decoration: none; } fieldset.brief o
                 <div style="display:block;" id="limits">
 
                                <fieldset class="brief"><h4 class="local_collapse"><a href="#">Bibliographic information</a></h4>
-                   <ol> <li><label for="title"> Title:</label><input type="text" id="title" name="title" value="[% title %]" /></li>
-                    <li><label for="author"> Author:</label><input type="text" id="author" name="author" value="[% author %]" /></li>
-                    <li><label for="isbn"> ISBN:</label><input type="text" id="isbn"  name="isbn" value="[% isbn %]" /></li>
-                    <li><label for="publishercode"> Publisher:</label><input type="text" id="publishercode" name="publishercode" value="[% publishercode %]" /></li>
-                    <li><label for="copyrightdate_filter"> Copyright date:</label><input type="text" id="copyrightdate_filter" name="copyrightdate" value="[% copyrightdate %]" /></li>
-                    <li><label for="collectiontitle"> Collection title:</label><input type="text" id="collectiontitle" name="collectiontitle" value="[% collectiontitle %]" /></li><li><input type="submit" value="Go" /></li></ol>
+                   <ol> <li><label for="title"> Title:</label><input type="text" id="title" name="title" value="[% title |html %]" /></li>
+                    <li><label for="author"> Author:</label><input type="text" id="author" name="author" value="[% author | html %]" /></li>
+                    <li><label for="isbn"> ISBN:</label><input type="text" id="isbn"  name="isbn" value="[% isbn | html %]" /></li>
+                    <li><label for="publishercode"> Publisher:</label><input type="text" id="publishercode" name="publishercode" value="[% publishercode | html %]" /></li>
+                    <li><label for="copyrightdate_filter"> Copyright date:</label><input type="text" id="copyrightdate_filter" name="copyrightdate" value="[% copyrightdate | html %]" /></li>
+                    <li><label for="collectiontitle"> Collection title:</label><input type="text" id="collectiontitle" name="collectiontitle" value="[% collectiontitle | html %]" /></li><li><input type="submit" value="Go" /></li></ol>
                 </fieldset>
                                 <fieldset class="brief"><h4 class="local_collapse"><a href="#">Suggestion information</a></h4>
                     <ol>
index b2bd84b..f6ce767 100644 (file)
@@ -52,17 +52,17 @@ tr.selected { background-color : #FFFFCC; } tr.selected td { background-color :
             [% ELSE %]
                 <tr>
             [% END %]
-            <td>[% INCLUDE 'biblio-default-view.inc' biblionumber = title.biblionumber %][% title.title %][% FOREACH subtitl IN title.subtitle %] [% subtitl.subfield %][% END %]</a>
+            <td>[% INCLUDE 'biblio-default-view.inc' biblionumber = title.biblionumber %][% title.title |html %][% FOREACH subtitl IN title.subtitle %] [% subtitl.subfield %][% END %]</a>
             [% title.author %]
-            <p>[% IF ( title.publishercode ) %]- [% title.publishercode %]
+            <p>[% IF ( title.publishercode ) %]- [% title.publishercode|html %]
             [% IF ( title.place ) %] [% title.place %][% END %][% END %]
             [% IF ( title.pages ) %] - [% title.pages %][% IF ( title.size ) %] [% title.size %]
             [% END %]
             [% END %]</p>
             [% IF ( title.notes ) %]
-            <p>[% title.notes%]</p>[% END %]
+            <p>[% title.notes |html%]</p>[% END %]
             [% IF ( title.TagLoop ) %]<p style="font-size:90%"><strong>Tagged with:</strong> [% FOREACH TagLoo IN title.TagLoop %]
-            <a href="/cgi-bin/koha/tags/list.pl?tag=[% TagLoo.term %]">[% TagLoo.term %]</a> <span class="weight">([% TagLoo.weight_total %])</span>[% IF ( loop.last ) %][% ELSE %], [% END %]
+            <a href="/cgi-bin/koha/tags/list.pl?tag=[% TagLoo.term %]">[% TagLoo.term |html %]</a> <span class="weight">([% TagLoo.weight_total %])</span>[% IF ( loop.last ) %][% ELSE %], [% END %]
             [% END %]</p>
             [% END %]
             </td>
index b0a954d..b4dcebe 100644 (file)
@@ -211,7 +211,7 @@ tr > td input,td input[type="submit"] { font-size: 85%; padding: 1px; }
   [% END %]
   [% IF ( pagination_bar ) %]
   <div class="pages" id="pagination_top">
-    [% pagination_bar.raw %]
+       [% pagination_bar %]
   </div>
   [% END %]
   [% IF ( tagloop ) %]
index 590fa7d..92d3137 100644 (file)
@@ -97,7 +97,7 @@ for( x=0; x<allColumns.length; x++ ){
                    <tbody>
             [% FOREACH item_loo IN item_loop %] <tr> [% IF ( show ) %][% IF ( item_loo.nomod ) %] <td class="error">Cannot edit</td>[% ELSE %]<td><input type="checkbox" name="itemnumber" value="[% item_loo.itemnumber %]" id="row[% item_loo.itemnumber %]" checked="checked" /></td>[% END %][% END %]
                    <td><label for="row[% item_loo.itemnumber %]"><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% item_loo.biblionumber %]">[% item_loo.title %]</a>[% IF ( item_loo.author ) %], by [% item_loo.author %][% END %]</label></td>
-            [% FOREACH item_valu IN item_loo.item_value %] <td>[% item_valu.field %]</td>
+                       [% FOREACH item_valu IN item_loo.item_value %] <td>[% item_valu.field |html %]</td> 
                                        [% END %] </tr>
                    [% END %]
                    </tbody>
index 329107a..38a76ce 100644 (file)
@@ -132,7 +132,7 @@ $(document).ready(function(){
                   <td>&nbsp;</td>
                 [% END %]
                 <td><label for="row[% item_loo.itemnumber %]"><a href="/cgi-bin/koha/catalogue/detail.pl?biblionumber=[% item_loo.biblionumber %]">[% item_loo.title %]</a>[% IF ( item_loo.author ) %], by [% item_loo.author %][% END %]</label></td>
-                [% FOREACH item_valu IN item_loo.item_value %] <td>[% item_valu.field %]</td>
+                [% FOREACH item_valu IN item_loo.item_value %] <td>[% item_valu.field |html %]</td> 
         [% END %] </tr>
             [% END %]
       </tbody>
@@ -174,7 +174,7 @@ $(document).ready(function(){
               <label for="tag_[% ite.tag %]_subfield_[% ite.subfield %]_[% ite.random %]">
               [% END %]
               [% ite.subfield %] -
-          [% ite.marc_lib.raw %]
+          [% ite.marc_lib %]
          </label>
                 [% UNLESS ( ite.mandatory ) %]<input type="checkbox" id="row[% ite.tag %][% ite.subfield %][% ite.random %]" title="Check to delete subfield [% ite.subfield %]" name="disable_input" value="[% ite.subfield %]" />[% ELSE %]<span class="required">Required</span>[% END %]
 
@@ -199,7 +199,7 @@ $(document).ready(function(){
                     [% ELSE %]
                         <a href="#" id="buttonDot_[% mv.id %]" class="buttonDot" title="Tag editor">...</a>
                     [% END %]
-                    [% mv.javascript.raw %]
+                    [% mv.javascript %]
                 [% ELSIF ( mv.type == 'text' ) %]
                     <input type="text" tabindex="1" id="[%- mv.id -%]" name="field_value" class="input_marceditor" size="50" maxlength="255" value="[%- mv.value -%]" />
                 [% ELSIF ( mv.type == 'hidden' ) %]
index 9e1fd5a..182cc8b 100644 (file)
@@ -167,7 +167,7 @@ $(document).ready(function() {
                 <tr>
                   <td><input type="checkbox" name="record_id" id="record_id_[% biblio.biblionumber %]" value="[% biblio.biblionumber %]" data-items="[% biblio.itemnumbers.size %]" data-issues="[% biblio.issues_count %]" data-reserves="[% biblio.reserves.size %]" /></td>
                   <td><label for="record_id_[% biblio.biblionumber %]">[% biblio.biblionumber %]</label></td>
-                  <td>[% INCLUDE 'biblio-default-view.inc' biblionumber=biblio.biblionumber %][% biblio.title %][% IF ( biblio.subtitle ) %][% FOREACH subtitle IN biblio.subtitle %] [% subtitle.subfield %][% END %][% END %]</a></td>
+                  <td>[% INCLUDE 'biblio-default-view.inc' biblionumber=biblio.biblionumber %][% biblio.title %][% IF ( biblio.subtitle ) %][% FOREACH subtitle IN biblio.subtitle %] [% subtitle.subfield |html %][% END %][% END %]</a></td>
                   <td><a href="/cgi-bin/koha/catalogue/moredetail.pl?biblionumber=[% biblio.biblionumber %]">[% biblio.itemnumbers.size %]</a></td>
                   <td><a href="/cgi-bin/koha/reserve/request.pl?biblionumber=[% biblio.biblionumber %]">[% biblio.reserves.size %]</a></td>
                   <td><a href="/cgi-bin/koha/catalogue/issuehistory.pl?biblionumber=[% biblio.biblionumber %]">[% biblio.issues_count %]</a></td>
index 85aedc3..5143b3c 100644 (file)
@@ -264,29 +264,29 @@ $(document).ready(function(){
               </td>
             [% END %]
             <td>
-            [% result.barcode %]
+            [% result.barcode | html %]
             </td>
             <td>
                 [% Branches.GetName( result.homebranch ) %]
-                [% result.location %] [% IF ( result.itemcallnumber ) %][[% result.itemcallnumber %]][% ELSE %][% END %]
+                [% result.location | html %] [% IF ( result.itemcallnumber ) %][[% result.itemcallnumber | html %]][% ELSE %][% END %]
             </td>
             <td>
-            <p><a href="/cgi-bin/koha/catalogue/MARCdetail.pl?biblionumber=[% result.biblionumber %]" class="openWin">[% result.title %]</a></p><p>[% result.author %]</p>
+            <p><a href="/cgi-bin/koha/catalogue/MARCdetail.pl?biblionumber=[% result.biblionumber %]" class="openWin">[% result.title | html %]</a></p><p>[% result.author | html %]</p>
             </td>
             <td>
-            [% result.notforloan %]
+            [% result.notforloan | html %]
             </td>
             <td>
-            [% result.itemlost %]
+            [% result.itemlost | html %]
             </td>
             <td>
-            [% result.damaged %]
+            [% result.damaged | html %]
             </td>
             <td>
-            [% result.withdrawn %]
+            [% result.withdrawn | html %]
             </td>
             <td>
-            [% result.datelastseen | $KohaDates %]
+            [% result.datelastseen | $KohaDates | html %]
             </td>
             <td>
             [% IF result.problem == 'wrongplace' %]
index 21bec07..38a3598 100644 (file)
@@ -145,7 +145,7 @@ Edit news item[% ELSE %]Add news item[% END %][% ELSE %]News[% END %]</div>
                 [% END %]
             </li>
             <li><label for="new">News: </label>
-            <textarea name="new" id="new"  cols="75" rows="10">[% new_detail.new.raw %]</textarea>
+            <textarea name="new" id="new"  cols="75" rows="10">[% new_detail.new %]</textarea>
             </li>
             </ol>
                        </fieldset>
@@ -247,7 +247,7 @@ Edit news item[% ELSE %]Add news item[% END %][% ELSE %]News[% END %]</div>
                             <td>[% opac_new.title %]</td>
                             <td>[% opac_new.author_title %] [% opac_new.author_firstname %] [% opac_new.author_surname %]</td>
                            <td>
-                                [% opac_new.new.raw %]
+                                [% opac_new.new %]
                             </td>
                             <td><a href="/cgi-bin/koha/tools/koha-news.pl?op=add_form&amp;id=[% opac_new.idnew %]">Edit</a></td>
                         </tr>
index cfa5b9a..fc7ab11 100644 (file)
                                     </td>
                                     <td>
                                         [% IF ( loopro.module == 'CIRCULATION' ) %]
-                                            <a href="/cgi-bin/koha/catalogue/moredetail.pl?itemnumber=[% loopro.info %]&amp;biblionumber=[% loopro.biblionumber %]&amp;bi=[% loopro.biblioitemnumber %]#item[% loopro.info %]" title="Display detail for this item">Item [% loopro.barcode %]</a>
+                                            <a href="/cgi-bin/koha/catalogue/moredetail.pl?itemnumber=[% loopro.info %]&amp;biblionumber=[% loopro.biblionumber %]&amp;bi=[% loopro.biblioitemnumber %]#item[% loopro.info %]" title="Display detail for this item">Item [% loopro.barcode |html %]</a>
                                         [% ELSE %]
-                                            [% loopro.info %]
+                                            [% loopro.info |html %]
                                         [% END %]
                                     </td>
                                 </tr>
index 5239026..63974a9 100644 (file)
 <div id="custom-doc" class="yui-t7">
    <div id="bd">
                 [% IF ( multiple ) %]
-                        <h1>Add [% total %] items to [% IF ( singleshelf ) %]<em>[% shelfname%]</em>: [% ELSE %]a list:[% END %]</h1>
+                   <h1>Add [% total %] items to [% IF ( singleshelf ) %]<em>[% shelfname | html%]</em>: [% ELSE %]a list:[% END %]</h1>
                 [% ELSE %]
-                        <h1>Add to [% IF ( singleshelf ) %]<em>[% shelfname %]</em>[% ELSE %]a list:[% END %]</h1>
+                        <h1>Add to [% IF ( singleshelf ) %]<em>[% shelfname | html %]</em>[% ELSE %]a list:[% END %]</h1>
                 [% END %]
                <ul>
                    [% FOREACH biblio IN biblios %]
-            <li> <span class="title">[% biblio.title %]</span>
+                       <li> <span class="title">[% biblio.title |html %]</span>
                            [% IF ( biblio.author ) %]<span class="author"> [% biblio.author %] </span>[% END %]
                        </li>
                    [% END %]
                 [% IF private_shelves.count %]
                     <optgroup label="Private lists">
                         [% FOREACH private_shelf IN private_shelves %]
-                            <option value="[% private_shelf.shelfnumber %]">[% private_shelf.shelfname %]</option>
+                            <option value="[% private_shelf.shelfnumber %]">[% private_shelf.shelfname | html%]</option>
                         [% END %]
                     </optgroup>
                 [% END %]
                 [% IF private_shelves_shared_with_me.count %]
                     <optgroup label="Private lists shared with me">
                         [% FOREACH private_shelf IN private_shelves_shared_with_me %]
-                            <option value="[% private_shelf.shelfnumber %]">[% private_shelf.shelfname %]</option>
+                            <option value="[% private_shelf.shelfnumber %]">[% private_shelf.shelfname | html%]</option>
                         [% END %]
                     </optgroup>
                 [% END %]
                 [% IF public_shelves.count %]
                     <optgroup label="Public lists">
                         [% FOREACH public_shelf IN public_shelves %]
-                            <option value="[% public_shelf.shelfnumber %]">[% public_shelf.shelfname %]</option>
+                            <option value="[% public_shelf.shelfnumber %]">[% public_shelf.shelfname | html%]</option>
                         [% END %]
                     </optgroup>
                 [% END %]
index 7f83b8b..e63d6f5 100644 (file)
@@ -1,5 +1,5 @@
 <SUBJECT>
-Your list: [% shelfname.raw %]
+Your list: [% shelfname %]
 <END_SUBJECT>
 
 [% USE HtmlToText %]
@@ -8,7 +8,7 @@ Your list: [% shelfname.raw %]
 [% FILTER html2text %]
     <p>Hi,</p>
 
-    <p>Here is your list called [% shelfname.raw %], sent from our online catalog.</p>
+    <p>Here is your list called [% shelfname %], sent from our online catalog.</p>
 
     <p>Please note that the attached file is a MARC bibliographic records file
     which can be imported into personal bibliographic software like EndNote,
@@ -22,30 +22,30 @@ Your list: [% shelfname.raw %]
 [% FILTER html2text %]
 
     [% IF comment %]
-        <p>[% comment.raw %]</p>
+        <p>[% comment %]</p>
         <hr/>
     [% END %]
     <ol>
     [% FOREACH BIBLIO_RESULT IN BIBLIO_RESULTS %]
         <li>
             <span>
-                [% BIBLIO_RESULT.title.raw %]
+                [% BIBLIO_RESULT.title %]
                 [% IF ( BIBLIO_RESULT.subtitle.size ) %]
                   [% FOREACH subtitle IN BIBLIO_RESULT.subtitle %]
-                    [% subtitle.subfield.raw %]
+                    [% subtitle.subfield %]
                   [% END %]
                 [% END %]
             </span>
 
             <p>
             [% IF ( BIBLIO_RESULT.HASAUTHORS ) %]
-            <span>Author(s): [% IF ( BIBLIO_RESULT.author ) %][% BIBLIO_RESULT.author.raw %][% END %]
+            <span>Author(s): [% IF ( BIBLIO_RESULT.author ) %][% BIBLIO_RESULT.author %][% END %]
 
             [% IF ( BIBLIO_RESULT.MARCAUTHORS ) %]
                 [% IF ( BIBLIO_RESULT.author ) %]; [% END %]
                 [% FOREACH MARCAUTHOR IN BIBLIO_RESULT.MARCAUTHORS %]
                     [% FOREACH MARCAUTHOR_SUBFIELDS_LOO IN MARCAUTHOR.MARCAUTHOR_SUBFIELDS_LOOP %]
-                        [% MARCAUTHOR_SUBFIELDS_LOO.separator.raw %][% MARCAUTHOR_SUBFIELDS_LOO.value.raw %]
+                        [% MARCAUTHOR_SUBFIELDS_LOO.separator %][% MARCAUTHOR_SUBFIELDS_LOO.value %]
                     [% END %]
                     [% UNLESS ( loop.last ) %];[% END %]
                 [% END %]
@@ -56,7 +56,7 @@ Your list: [% shelfname.raw %]
             [% IF ( BIBLIO_RESULT.ISBN ) %]
             <span>
                 ISBN: [% FOREACH isbn IN BIBLIO_RESULT.ISBN %]
-                          [% isbn.raw %]
+                          [% isbn %]
                           [% UNLESS ( loop.last ) %]; [% END %]
                       [% END %]
             </span><br/>
@@ -64,12 +64,12 @@ Your list: [% shelfname.raw %]
 
             [% IF BIBLIO_RESULT.publishercode %]
             <span>
-                Published by: [% BIBLIO_RESULT.publishercode.raw %]
+                Published by: [% BIBLIO_RESULT.publishercode %]
                 [% IF ( BIBLIO_RESULT.publicationyear ) %]
-                    in [% BIBLIO_RESULT.publicationyear.raw %]
+                    in [% BIBLIO_RESULT.publicationyear %]
                 [% END %]
                 [% IF ( BIBLIO_RESULT.pages ) %]
-                    , [% BIBLIO_RESULT.pages.raw %]
+                    , [% BIBLIO_RESULT.pages %]
                 [% END %]
                 [% IF BIBLIO_RESULT.item('size') %]
                 , [% BIBLIO_RESULT.item('size') %]
@@ -79,55 +79,55 @@ Your list: [% shelfname.raw %]
 
             [% IF BIBLIO_RESULT.collection %]
             <span>
-                Collection: [% BIBLIO_RESULT.seriestitle.raw %]
+                Collection: [% BIBLIO_RESULT.seriestitle %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.subject ) %]
             <span>
-                Subject: [% BIBLIO_RESULT.subject.raw %]
+                Subject: [% BIBLIO_RESULT.subject %]
             <span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.copyrightdate ) %]
             <span>
-                Copyright year: [% BIBLIO_RESULT.copyrightdate.raw %]
+                Copyright year: [% BIBLIO_RESULT.copyrightdate %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.notes ) %]
             <span>
-                Notes : [% BIBLIO_RESULT.notes.raw %]
+                Notes : [% BIBLIO_RESULT.notes %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.unititle ) %]
             <span>
-                Unified title: [% BIBLIO_RESULT.unititle.raw %]
+                Unified title: [% BIBLIO_RESULT.unititle %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.serial ) %]
             <span>
-                Serial: [% BIBLIO_RESULT.serial.raw %]
+                Serial: [% BIBLIO_RESULT.serial %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.dewey ) %]
             <span>
-                Dewey: [% BIBLIO_RESULT.dewey.raw %]
+                Dewey: [% BIBLIO_RESULT.dewey %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.classification ) %]
             <span>
-                Classification: [% BIBLIO_RESULT.classification.raw %]
+                Classification: [% BIBLIO_RESULT.classification %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.lccn ) %]
             <span>
-                LCCN: [% BIBLIO_RESULT.lccn.raw %]
+                LCCN: [% BIBLIO_RESULT.lccn %]
             </span><br/>
             [% END %]
             [% IF ( BIBLIO_RESULT.url ) %]
@@ -139,17 +139,17 @@ Your list: [% shelfname.raw %]
 
             [% IF ( OPACBaseURL ) %]
             <p>
-                In online catalog: [% OPACBaseURL.raw %]/cgi-bin/koha/opac-detail.pl?biblionumber=[% BIBLIO_RESULT.biblionumber %]
+                In online catalog: [% OPACBaseURL %]/cgi-bin/koha/opac-detail.pl?biblionumber=[% BIBLIO_RESULT.biblionumber %]
             </p>
             [% END %]
             [% IF ( BIBLIO_RESULT.ITEM_RESULTS.size ) %]
             <p>Items:
             <ul>
                 [% FOREACH ITEM_RESULT IN BIBLIO_RESULT.ITEM_RESULTS %]<li>
-                    [% ITEM_RESULT.branchname.raw %]
-                    [% ITEM_RESULT.location.raw %]
-                    [% IF ITEM_RESULT.itemcallnumber %]([% ITEM_RESULT.itemcallnumber.raw %])[% END %]
-                    [% ITEM_RESULT.barcode.raw %]
+                    [% ITEM_RESULT.branchname %]
+                    [% ITEM_RESULT.location %]
+                    [% IF ITEM_RESULT.itemcallnumber %]([% ITEM_RESULT.itemcallnumber %])[% END %]
+                    [% ITEM_RESULT.barcode %]
                 </li>[% END %]
             </ul>
             </p>
index 01fc654..8f91e29 100644 (file)
@@ -3,7 +3,7 @@
 [% SET PRIVATE = 1 %]
 [% SET PUBLIC = 2 %]
 [% INCLUDE 'doc-head-open.inc' %]
-<title>Koha &rsaquo; [% IF op == 'view' %]Lists &rsaquo; Contents of [% shelf.shelfname %][% ELSE %]Lists[% END %][% IF op == 'add_form' %] &rsaquo; Create new list[% END %][% IF op == 'edit_form' %] &rsaquo; Edit list [% shelf.shelfname %][% END %]</title>
+<title>Koha &rsaquo; [% IF op == 'view' %]Lists &rsaquo; Contents of [% shelf.shelfname | html %][% ELSE %]Lists[% END %][% IF op == 'add_form' %] &rsaquo; Create new list[% END %][% IF op == 'edit_form' %] &rsaquo; Edit list [% shelf.shelfname | html %][% END %]</title>
 [% INCLUDE 'doc-head-close.inc' %]
 <link rel="stylesheet" type="text/css" href="[% themelang %]/css/datatables.css" />
 [% INCLUDE 'datatables.inc' %]
@@ -138,7 +138,7 @@ $(document).ready(function(){
             [% SET number_of_private_shelves = 0 %]
             [% FOREACH s IN add_to_some_private_shelves %]
                 [% IF shelfnumber != s.shelfnumber %]
-                    param1 += "<option id=\"s[% s.shelfnumber %]\" value=\"addtolist\">[% s.shelfname %]<\/option>";
+                    param1 += "<option id=\"s[% s.shelfnumber %]\" value=\"addtolist\">[% s.shelfname |html %]<\/option>";
                     [% SET number_of_private_shelves = number_of_private_shelves + 1 %]
                     [% IF number_of_private_shelves == 10 %][% LAST %][% END %]
                 [% END %]
@@ -150,7 +150,7 @@ $(document).ready(function(){
             [% SET number_of_public_shelves = 0 %]
             [% FOREACH s IN add_to_some_public_shelves %]
                 [% IF shelfnumber != s.shelfnumber %]
-                    param1 += "<option id=\"s[% s.shelfnumber %]\" value=\"addtolist\">[% s.shelfname %]<\/option>";
+                    param1 += "<option id=\"s[% s.shelfnumber %]\" value=\"addtolist\">[% s.shelfname |html %]<\/option>";
                     [% SET number_of_public_shelves = number_of_public_shelves + 1 %]
                     [% IF number_of_public_shelves == 10 %][% LAST %][% END %]
                 [% END %]
@@ -310,7 +310,7 @@ function placeHold () {
         [% END %]
     [% END %]
 
-[% IF op == 'view' %]&rsaquo; Contents of <i>[% shelf.shelfname %]</i>[% END %][% IF op == 'add_form' %] &rsaquo; Create new list[% END %][% IF op == 'edit_form' %] &rsaquo; Edit list <i>[% shelf.shelfname %]</i>[% END %]</div>
+[% IF op == 'view' %]&rsaquo; Contents of <i>[% shelf.shelfname | html %]</i>[% END %][% IF op == 'add_form' %] &rsaquo; Create new list[% END %][% IF op == 'edit_form' %] &rsaquo; Edit list <i>[% shelf.shelfname | html %]</i>[% END %]</div>
 
 <div id="doc3" class="yui-t2">
 <div id="bd">
@@ -371,7 +371,7 @@ function placeHold () {
    <div class="yui-g">
     [% IF itemsloop %]
 
-    <h3>Contents of <i>[% shelf.shelfname %]</i></h3>
+    <h3>Contents of <i>[% shelf.shelfname | html %]</i></h3>
     <div class="pages">[% pagination_bar %]</div>
     <form action="/cgi-bin/koha/virtualshelves/shelves.pl" id="listform" method="post" class="checkboxed">
         <input type="hidden" name="op" value="remove_biblios" />
@@ -453,7 +453,7 @@ function placeHold () {
                     [% itemsloo.XSLTBloc %]
                 [% ELSE %]
                     [% INCLUDE 'biblio-default-view.inc' biblionumber = itemsloo.biblionumber %]
-                    [% itemsloo.title %][% FOREACH subtitl IN itemsloo.subtitle %] [% subtitl.subfield %][% END %]</a>
+                    [% itemsloo.title |html %][% FOREACH subtitl IN itemsloo.subtitle %] [% subtitl.subfield %][% END %]</a>
                 [% END %]
                     <p class="hold">
                         [% IF ( itemsloo.notforloan ) %]
@@ -490,7 +490,7 @@ function placeHold () {
                        </tr>
                [% END %]<!-- /itemsloop -->
     </table>
-    <div class="pages">[% pagination_bar.raw %]</div>
+    <div class="pages">[% pagination_bar %]</div>
 </form>
 
        [% END %]
@@ -501,7 +501,7 @@ function placeHold () {
 <div class="yui-g">
 <form action="/cgi-bin/koha/virtualshelves/shelves.pl" method="post">
  <fieldset class="brief noprint">
-    <legend>Add an item to <i>[% shelf.shelfname %]</i></legend>
+    <legend>Add an item to <i>[% shelf.shelfname | html %]</i></legend>
         <ol>
             <li>
                 <label for="barcode">Barcode:</label>
@@ -527,14 +527,14 @@ function placeHold () {
             <legend>Create a new list</legend>
             <input type="hidden" name="op" value="add" />
         [% ELSE %]
-            <legend>Edit list <i>[% shelf.shelfname %]</i></legend>
+            <legend>Edit list <i>[% shelf.shelfname | html %]</i></legend>
             <input type="hidden" name="op" value="edit" />
         [% END %]
         <input type="hidden" name="referer" value="[% referer %]" />
         <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber %]" />
         <ol>
             <li>
-                <label for="shelfname" class="required">Name: </label><input type="text" id="shelfname" name="shelfname" size="25" value="[% shelf.shelfname %]" required="required" class="required" />
+                <label for="shelfname" class="required">Name: </label><input type="text" id="shelfname" name="shelfname" size="25" value="[% shelf.shelfname |html %]" required="required" class="required" />
             <span class="required">Required</span>
             </li>
             <li>
index afed3a1..0304dbe 100644 (file)
@@ -10,7 +10,7 @@
                 "dt_type":
                     "[% data.type %]",
                 "dt_shelfname":
-                    "<a href='/cgi-bin/koha/virtualshelves/shelves.pl?op=view&shelfnumber=[% data.shelfnumber %]'>[% data.shelfname %]</a>",
+                    "<a href='/cgi-bin/koha/virtualshelves/shelves.pl?op=view&shelfnumber=[% data.shelfnumber %]'>[% data.shelfname | html%]</a>",
                 "dt_count":
                     "[% data.count %] item(s)",
                 "dt_owner":
index b9290fd..043556d 100644 (file)
     [% IF marcflavour == 'UNIMARC' %]
         [% SWITCH type %]
             [% CASE 'broader' %]
-              <span class="BT">BT: [% heading %]</span>
+              <span class="BT">BT: [% heading | html %]</span>
             [% CASE 'narrower' %]
-              <span class="NT">NT: [% heading %]</span>
+              <span class="NT">NT: [% heading | html %]</span>
             [% CASE 'seefrom' %]
-              <span class="UF">UF: [% heading %]</span>
+              <span class="UF">UF: [% heading | html %]</span>
             [% CASE 'seealso' %]
-              <span class="RT">RT: [% heading %]</span>
+              <span class="RT">RT: [% heading | html %]</span>
         [% END %]
     [% ELSE %]
         <span class="heading">
         [% IF ( linkType=='seealso' ) %]
             [% IF ( authid ) %]
-            <a href="[% authidurl | url %][% authid | url %]">[% heading %]</a>
+            <a href="[% authidurl | url %][% authid | url %]">[% heading | html %]</a>
             [% ELSE %]
-            <a href="[% searchurl | url %][% heading %]">[% heading %]</a>
+            <a href="[% searchurl | url %][% heading | html %]">[% heading | html %]</a>
             [% END %]
         [% ELSE %]
-            [% heading %]
+            [% heading | html %]
         [% END %]
         </span>
         [% UNLESS ( type=='seefrom' || type=='seealso' ) %]
@@ -42,7 +42,7 @@
                     [% CASE 'narrower' %](Narrower heading)
                     [% CASE 'parent' %](Immediate parent body)
                     [% CASE %]
-                        [% IF type %]([% type %])[% END %]
+                        [% IF type %]([% type | html %])[% END %]
                     [% END %]
                 </span>
         [% END # / UNLESS seefrom %]
@@ -50,7 +50,7 @@
 [% END # / BLOCK showreference %]
 
 [% BLOCK authresult %]
-    [% IF ( summary.label ) %][% summary.label %]:[% END %]
+    [% IF ( summary.label ) %][% summary.label | html %]:[% END %]
     [% IF summary.summary %]
         <div class="authority-summary">
             [% summary.summary %]
@@ -59,7 +59,7 @@
     [% UNLESS ( summary.summaryonly ) %]
         <div class="authorizedheading">
             [% FOREACH authorize IN summary.authorized %]
-                <span class="authorizedheading">[% authorize.heading %]</span>
+                <span class="authorizedheading">[% authorize.heading | html %]</span>
                 [% UNLESS loop.last %] | [% END %]
             [% END %]
         </div>
@@ -67,7 +67,7 @@
             [% IF summary.notes %]
                 <div class="authres_notes">
                     [% FOREACH note IN summary.notes %]
-                        <span>[% note.note %]</span>
+                        <span>[% note.note | html %]</span>
                     [% END %]
                 </div>
             [% END %]
index c2c6005..487d7e9 100644 (file)
@@ -1,15 +1,15 @@
 [% classprop  = 'class="' %]
 [% IF LoginBranchcode.defined %]
-    [% classprop = classprop.raw _ 'branch-' _ LoginBranchcode %]
+    [% classprop = classprop _ 'branch-' _ LoginBranchcode %]
 [% ELSE %]
-    [% classprop = classprop.raw _ 'branch-default' %]
+    [% classprop = classprop _ 'branch-default' %]
 [% END %]
 [% IF bodyclass.defined %]
-    [% classprop = classprop.raw _ ' ' _ bodyclass %]
+    [% classprop = classprop _ ' ' _ bodyclass %]
 [% END %]
-[% classprop = classprop.raw _ '"' %]
+[% classprop = classprop _ '"' %]
 
 [% IF bodyid.defined %]
     [% idprop = 'ID="' _ bodyid _ '" ' %]
 [% END %]
-<body [%idprop%][% classprop.raw %] >
+<body [%idprop%][% classprop %] >
index 00d4048..e346689 100644 (file)
@@ -37,7 +37,7 @@
 [% IF ( bidi ) %]
     <link rel="stylesheet" type="text/css" href="[% interface %]/[% theme %]/css/right-to-left.css" />
 [% END %]
-[% IF ( OPACUserCSS ) %]<style type="text/css">[% OPACUserCSS.raw %]</style>[% END %]
+[% IF ( OPACUserCSS ) %]<style type="text/css">[% OPACUserCSS %]</style>[% END %]
 <link rel="unapi-server" type="application/xml" title="unAPI" href="[% OPACBaseURL %]/cgi-bin/koha/unapi" />
 [% PROCESS cssinclude %]
 <!-- Respond.js brings responsive layout behavior to IE < v.9 -->
index 06708d0..e2d707b 100644 (file)
@@ -27,7 +27,7 @@
         <div class="container-fluid">
             <div class="row-fluid">
                 <div id="opacheader">
-                    [% opacheader.raw %]
+                    [% opacheader %]
                 </div>
             </div>
         </div>
index 949ccf3..21504c2 100644 (file)
@@ -41,7 +41,7 @@
                                     <li role="presentation"><a href="/cgi-bin/koha/opac-shelves.pl?op=list&amp;category=2" tabindex="-1" role="menuitem"><strong>Public lists</strong></a></li>
                                     [% SET number_of_public_shelves = 0 %]
                                     [% FOREACH s IN some_public_shelves %]
-                                        <li role="presentation"><a href="/cgi-bin/koha/opac-shelves.pl?op=view&amp;shelfnumber=[% s.shelfnumber %]&amp;sortfield=[% s.sortfield %]" tabindex="-1" role="menuitem">[% s.shelfname %]</a></li>
+                                        <li role="presentation"><a href="/cgi-bin/koha/opac-shelves.pl?op=view&amp;shelfnumber=[% s.shelfnumber %]&amp;sortfield=[% s.sortfield %]" tabindex="-1" role="menuitem">[% s.shelfname |html %]</a></li>
                                         [% SET number_of_public_shelves = number_of_public_shelves + 1 %]
                                         [% IF number_of_public_shelves >= 10 %][% LAST %][% END %]
                                     [% END %]
@@ -58,7 +58,7 @@
                                         [% IF some_private_shelves.count %]
                                             [% SET number_of_private_shelves = 0 %]
                                             [% FOREACH s IN some_private_shelves %]
-                                                <li role="presentation"><a href="/cgi-bin/koha/opac-shelves.pl?op=view&amp;shelfnumber=[% s.shelfnumber %]&amp;sortfield=[% s.sortfield %]" tabindex="-1" role="menuitem">[% s.shelfname %]</a></li>
+                                                <li role="presentation"><a href="/cgi-bin/koha/opac-shelves.pl?op=view&amp;shelfnumber=[% s.shelfnumber %]&amp;sortfield=[% s.sortfield %]" tabindex="-1" role="menuitem">[% s.shelfname |html %]</a></li>
                                                 [% SET number_of_private_shelves = number_of_private_shelves + 1 %]
                                                 [% IF number_of_private_shelves >= 10 %][% LAST %][% END %]
                                             [% END %]
             <div class="container-fluid">
                 <div class="row-fluid">
                     <div id="opacheader">
-                        [% opacheader.raw %]
+                        [% opacheader %]
                     </div>
                 </div>
             </div>
                                     <div class="input-append nolibrarypulldown">
                                 [% END %]
                                 [% IF ( ms_value ) %]
-                                    <input type="text" title="Type search term" class="transl1" id = "translControl1" name="q" value="[% ms_value %]" /><span id="translControl"></span>
+                                    <input type="text" title="Type search term" class="transl1" id = "translControl1" name="q" value="[% ms_value |html %]" /><span id="translControl"></span>
                                 [% ELSE %]
                                     <input type="text" title="Type search term" class="transl1" id = "translControl1" name="q" /><span id="translControl"></span>
                                 [% END # /ms_value %]
 
                             </form>
                         [% ELSE # / Koha.Preference('OpacCustomSearch') == '' %]
-                            [% Koha.Preference('OpacCustomSearch').raw %]
+                            [% Koha.Preference('OpacCustomSearch') %]
                         [% END # / Koha.Preference('OpacCustomSearch') == '' %]
                         </div> <!-- / .mastheadsearch -->
                     [% END # / UNLESS advsearch %]
                     [% END %]
                     [% IF Koha.Preference( 'NoLoginInstructions' ) %]
                         <div id="nologininstructions-modal">
-                            [% Koha.Preference( 'NoLoginInstructions' ).raw %]
+                            [% Koha.Preference( 'NoLoginInstructions' ) %]
                         </div>
                     [% END %]
                         [% IF PatronSelfRegistration && PatronSelfRegistrationDefaultCategory %]<div id="mpatronregistration"><p>Don't have an account? <a href="/cgi-bin/koha/opac-memberentry.pl">Register here.</a></p></div>[% END %]
index 7737089..1926c1e 100644 (file)
@@ -1,5 +1,5 @@
-<div id="opacnav">[% OpacNav.raw %]</div>
+<div id="opacnav">[% OpacNav %]</div>
 [% IF IsPatronPage %]
     <div id="usermenu">[% INCLUDE usermenu.inc %]</div>
 [% END %]
-<div id="opacnavbottom">[% OpacNavBottom.raw %]</div>
+<div id="opacnavbottom">[% OpacNavBottom %]</div>
index fc17f53..aed68e5 100644 (file)
@@ -9,9 +9,9 @@
         [% FOREACH node IN tree %]
             <li id="hier[% node.authid %]" class="[% node.class %] authnode">
             [% IF ( node.current_value ) %]
-                <span class="currentauth">[% node.value %]</span>
+                <span class="currentauth">[% node.value | html %]</span>
             [% ELSE %]
-                <a href="opac-authoritiesdetail.pl?authid=[% node.authid %]" title="Term">[% node.value %]</a>
+                <a href="opac-authoritiesdetail.pl?authid=[% node.authid %]" title="Term">[% node.value | html %]</a>
             [% END %]
             [% IF ( node.children && node.children.size > 0 ) %]
                 [% PROCESS showtree tree = node.children %]
index 41017e0..03ede07 100644 (file)
@@ -5,7 +5,7 @@
             <div class="row-fluid">
                 <div class="span12">
                     <div id="opaccredits" class="noprint">
-                        [% opaccredits.raw %]
+                        [% opaccredits %]
                     </div>
                 </div>
             </div>
@@ -241,7 +241,7 @@ $.widget.bridge('uitooltip', $.ui.tooltip);
         signinLink.onclick = function(evt) {
             // Requests a signed identity assertion from the user.
             navigator.id.request({
-                siteName: "[% LibraryName %]",
+                siteName: "[% LibraryName | html %]",
                 returnTo: '/cgi-bin/koha/opac-user.pl',
                 oncancel: function() { alert('user refuses to share identity.'); }
                 });
@@ -270,7 +270,7 @@ $(document).ready(function() {
 [% IF ( OPACUserJS ) %]
     <script type="text/javascript">
         //<![CDATA[
-        [% OPACUserJS.raw %]
+        [% OPACUserJS %]
         //]]>
     </script>
 [% END %]
index 8e7d452..d02b4c2 100644 (file)
@@ -71,7 +71,7 @@
                     <a id="furthersearches" class="dropdown-toggle" data-toggle="dropdown" href="#">More searches <b class="caret"></b></a>
                         <ul class="dropdown-menu pull-right" role="menu" aria-labelledby="furthersearches">
                             <li><a href="#" class="menu-inactive">Search for this title in:</a></li>
-                            [% OPACSearchForTitleIn.raw %]
+                            [% OPACSearchForTitleIn %]
                         </ul>
                 </div>
             </div>
index 995adfd..769145f 100644 (file)
                                   [% IF facet.active %]
                                     [% SET local_url = url _ "&amp;nolimit=" _ facet.type_link_value _ ":" _ facet.facet_link_value %]
                                     <span class="facet-label">[% facet.facet_label_value %]</span>
-                                    [<a href="[% local_url %]" title="Remove facet [% facet.facet_link_value %]">x</a>]
+                                    [<a href="[% local_url %]" title="Remove facet [% facet.facet_link_value | html %]">x</a>]
                                   [% ELSE %]
                                     [% SET local_url = url _ "&amp;limit=" _ facet.type_link_value _ ":" _ facet.facet_link_value %]
-                                    <span class="facet-label"><a href="[% local_url %]" title="[% facet.facet_title_value %]">[% facet.facet_label_value %]</a></span>
+                                    <span class="facet-label"><a href="[% local_url %]" title="[% facet.facet_title_value |html %]">[% facet.facet_label_value %]</a></span>
                                     [% IF ( displayFacetCount ) %]
                                       <span class="facet-count"> ([% facet.facet_count %])</span>
                                     [% END %]
@@ -63,7 +63,7 @@
 
     [% IF ( OPACResultsSidebar ) %]
         <div id="opacresultssidebar">
-            [% OPACResultsSidebar.raw %]
+            [% OPACResultsSidebar %]
         </div>
     [% END %]
 [% END # / IF opacfacets && facets_loop %]
index 175c378..f18c9ce 100644 (file)
@@ -2,17 +2,17 @@
     <div class="pagination pagination-small noprint">
         <ul>
         [% IF ( previous_page_offset.defined ) %]
-            <li><a href="/cgi-bin/koha/opac-search.pl?[% query_cgi %][% limit_cgi %]&amp;offset=[% previous_page_offset %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by %][% END %]">&laquo; Previous</a></li>
+            <li><a href="/cgi-bin/koha/opac-search.pl?[% query_cgi |html %][% limit_cgi |html %]&amp;offset=[% previous_page_offset %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by |html %][% END %]">&laquo; Previous</a></li>
         [% END %]
         [% FOREACH PAGE_NUMBER IN PAGE_NUMBERS %]
             [% IF ( PAGE_NUMBER.highlight ) %]
                 <li class="active"><a href="#">[% PAGE_NUMBER.pg %]</a></li>
             [% ELSE %]
-                <li><a href="/cgi-bin/koha/opac-search.pl?[% query_cgi %][% limit_cgi %]&amp;offset=[% PAGE_NUMBER.offset %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by%][% END %]">[% PAGE_NUMBER.pg %]</a></li>
+                <li><a href="/cgi-bin/koha/opac-search.pl?[% query_cgi |html %][% limit_cgi |html %]&amp;offset=[% PAGE_NUMBER.offset %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by |html%][% END %]">[% PAGE_NUMBER.pg %]</a></li>
             [% END %]
         [% END %]
         [% IF ( next_page_offset ) %]
-            <li><a href="/cgi-bin/koha/opac-search.pl?[% query_cgi %][% limit_cgi %]&amp;offset=[% next_page_offset %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by %][% END %]">Next &raquo;</a></li>
+            <li><a href="/cgi-bin/koha/opac-search.pl?[% query_cgi |html %][% limit_cgi |html %]&amp;offset=[% next_page_offset %][% IF ( sort_by ) %]&amp;sort_by=[% sort_by |html %][% END %]">Next &raquo;</a></li>
         [% END %]
         </ul>
     </div>
index fad11cb..f806b4f 100644 (file)
@@ -60,7 +60,7 @@
                                 [% IF ( BakerTaylorEnabled ) %]
                                     [% bt_id = ( item.browser_normalized_upc || item.browser_normalized_isbn ) %]
                                     [% IF ( bt_id ) %]
-                                        <img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL %][% bt_id %]" />
+                                        <img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL |html %][% bt_id %]" />
                                     [% ELSE %]
                                         <span class="no-image">No cover image available</span>
                                     [% END %]
@@ -81,7 +81,7 @@
                     [% FOREACH item IN shelfbrowser_items %]
                         <td class="top">
                             [% item.itemcallnumber %]
-                            <a href="/cgi-bin/koha/opac-detail.pl?biblionumber=[% item.biblionumber %]&amp;shelfbrowse_itemnumber=[% item.itemnumber %]#shelfbrowser">[% item.title %]</a>
+                            <a href="/cgi-bin/koha/opac-detail.pl?biblionumber=[% item.biblionumber %]&amp;shelfbrowse_itemnumber=[% item.itemnumber %]#shelfbrowser">[% item.title |html %]</a>
                         </td>
                     [% END %]
                 </tr>
index 9ae1298..62fc15f 100644 (file)
@@ -20,7 +20,7 @@
 </head>
 <body id="opac_maintenance" class="opac">
     [% IF ( opacheader ) %]
-        [% opacheader.raw %]
+        [% opacheader %]
     [% END %]
     <div class="container-fluid">
         <div class="row-fluid">
index f1c3cf9..3c47566 100644 (file)
@@ -21,7 +21,7 @@
                             <div id="views">
                                 <span class="view"><a id="Normalview" href="/cgi-bin/koha/opac-detail.pl?biblionumber=[% biblionumber %]">Normal view</a></span> <span class="view"><a id="MARCview" href="/cgi-bin/koha/opac-MARCdetail.pl?biblionumber=[% biblionumber %]">MARC view</a></span> <span class="view"><span id="ISBDview">ISBD view</span></span></div>
 
-                                <div id="isbdcontents">[% ISBD.raw %]</div>
+                                <div id="isbdcontents">[% ISBD %]</div>
 
                         </div> <!-- / #catalogue_detail_biblio -->
                     </div> <!-- / #usermarcdetail -->
index a34310d..f4ca095 100644 (file)
@@ -37,7 +37,7 @@
                                     <tr><th colspan="2">[% tab0X.tag %]</th></tr>
                                     [% FOREACH subfiel IN tab0X.subfield %]
                                             <tr>
-                                                <td>[% subfiel.marc_lib.raw %]</td>
+                                                <td>[% subfiel.marc_lib %]</td>
                                                 <td>[% subfiel.marc_value %]</td>
                                             </tr>
                                         [% END %]
@@ -46,7 +46,7 @@
                                     <tr><th colspan="2">[% tab1X.tag %]</th></tr>
                                     [% FOREACH subfiel IN tab1X.subfield %]
                                             <tr>
-                                                <td  >[% subfiel.marc_lib.raw %]</td>
+                                                <td  >[% subfiel.marc_lib %]</td>
                                                 <td  >[% subfiel.marc_value %]</td>
                                             </tr>
                                         [% END %]
@@ -56,7 +56,7 @@
                                     <tr><th colspan="2">[% tab2X.tag %]</th></tr>
                                     [% FOREACH subfiel IN tab2X.subfield %]
                                             <tr>
-                                                <td>[% subfiel.marc_lib.raw %]</td>
+                                                <td>[% subfiel.marc_lib %]</td>
                                                 <td>[% subfiel.marc_value %]</td>
                                             </tr>
                                         [% END %]
@@ -66,7 +66,7 @@
                                     <tr><th colspan="2">[% tab3X.tag %]</th></tr>
                                     [% FOREACH subfiel IN tab3X.subfield %]
                                             <tr>
-                                                <td>[% subfiel.marc_lib.raw %]</td>
+                                                <td>[% subfiel.marc_lib %]</td>
                                                 <td>[% subfiel.marc_value %]</td>
                                             </tr>
                                         [% END %]
@@ -76,7 +76,7 @@
                                     <tr><th colspan="2" >[% tab4X.tag %]</th></tr>
                                     [% FOREACH subfiel IN tab4X.subfield %]
                                             <tr>
-                                                <td>[% subfiel.marc_lib.raw %]</td>
+                                                <td>[% subfiel.marc_lib %]</td>
                                                 <td>[% subfiel.marc_value %]</td>
                                             </tr>
                                         [% END %]
@@ -86,7 +86,7 @@
                                     <tr><th colspan="2">[% tab5X.tag %]</th></tr>
                                     [% FOREACH subfiel IN tab5X.subfield %]
                                             <tr>
-                                                <td>[% subfiel.marc_lib.raw %]</td>
+                                                <td>[% subfiel.marc_lib %]</td>
                                                 <td>[% subfiel.marc_value %]</td>
                                             </tr>
                                         [% END %]
@@ -96,7 +96,7 @@
                                     <tr><th colspan="2">[% tab6X.tag %]</th></tr>
                                     [% FOREACH subfiel IN tab6X.subfield %]
                                             <tr>
-                                                <td>[% subfiel.marc_lib.raw %]</td>
+                                                <td>[% subfiel.marc_lib %]</td>
                                                 <td>[% subfiel.marc_value %]</td>
                                             </tr>
                                         [% END %]
                                     <tr><th colspan="2">[% tab7X.tag %]</th></tr>
                                     [% FOREACH subfiel IN tab7X.subfield %]
                                             <tr>
-                                                <td>[% subfiel.marc_lib.raw %]</td>
+                                                <td>[% subfiel.marc_lib %]</td>
                                                 <td>[% subfiel.marc_value %]</td>
                                             </tr>
                                         [% END %]
                                     <tr><th colspan="2">[% tab8X.tag %]</th></tr>
                                     [% FOREACH subfiel IN tab8X.subfield %]
                                             <tr>
-                                                <td>[% subfiel.marc_lib.raw %]</td>
+                                                <td>[% subfiel.marc_lib %]</td>
                                                 <td>[% subfiel.marc_value %]</td>
                                             </tr>
                                         [% END %]
                                     <tr><th colspan="2">[% tab9X.tag %]</th></tr>
                                     [% FOREACH subfiel IN tab9X.subfield %]
                                             <tr>
-                                                <td>[% subfiel.marc_lib.raw %]</td>
+                                                <td>[% subfiel.marc_lib %]</td>
                                                 <td>[% subfiel.marc_value %]</td>
                                             </tr>
                                         [% END %]
index b39e7d5..164c750 100644 (file)
                         [% IF ( authorized ) %]
                             [% UNLESS ( newshelf ) %]
                                 [% IF ( multiple ) %]
-                                    <h1>Add [% total %] items to [% IF ( singleshelf ) %]<em>[% shelfname %]</em>: [% ELSE %]a list:[% END %]</h1>
+                                    <h1>Add [% total %] items to [% IF ( singleshelf ) %]<em>[% shelfname | html %]</em>: [% ELSE %]a list:[% END %]</h1>
                                 [% ELSE %]
-                                    <h1>Add to [% IF ( singleshelf ) %]<em>[% shelfname %]</em>[% ELSE %]a list:[% END %]</h1>
+                                    <h1>Add to [% IF ( singleshelf ) %]<em>[% shelfname | html %]</em>[% ELSE %]a list:[% END %]</h1>
                                 [% END %]
                                 <ul>
                                     [% FOREACH biblio IN biblios %]
-                                        <li> <span class="title">[% biblio.title %]</span>
+                                        <li> <span class="title">[% biblio.title |html %]</span>
                                             [% IF ( biblio.author ) %]<span class="author"> [% biblio.author %] </span>[% END %]
                                         </li>
                                     [% END %]
                                             <label for="shelfnumber">Add to list:</label> <select name="shelfnumber" id="shelfnumber">
                                                 [% IF private_shelves.count %]<optgroup label="Private lists">
                                                     [% FOREACH private_shelf IN private_shelves %]
-                                                    <option value="[% private_shelf.shelfnumber %]">[% private_shelf.shelfname %]</option>
+                                                    <option value="[% private_shelf.shelfnumber %]">[% private_shelf.shelfname | html%]</option>
                                                     [% END %]
                                                 </optgroup>[% END %]
                                                 [% IF private_shelves_shared_with_me.count %]<optgroup label="Private lists shared with me">
                                                     [% FOREACH private_shelf IN private_shelves_shared_with_me %]
-                                                    <option value="[% private_shelf.shelfnumber %]">[% private_shelf.shelfname %]</option>
+                                                    <option value="[% private_shelf.shelfnumber %]">[% private_shelf.shelfname | html%]</option>
                                                     [% END %]
                                                 </optgroup>[% END %]
                                                 [% IF public_shelves.count %]<optgroup label="Public lists">
                                                     [% FOREACH public_shelf IN public_shelves %]
-                                                    <option value="[% public_shelf.shelfnumber %]">[% public_shelf.shelfname %]</option>
+                                                    <option value="[% public_shelf.shelfnumber %]">[% public_shelf.shelfname |html%]</option>
                                                     [% END %]
                                                 </optgroup>[% END %]
                                             </select>
@@ -87,7 +87,7 @@
                                             </select>
                                     </fieldset>
                                     [% FOREACH biblio IN biblios %]
-                                        <input type="hidden" name="biblionumber" value="[% biblio.biblionumber%]" />
+                                        <input type="hidden" name="biblionumber" value="[% biblio.biblionumber | html%]" />
                                     [% END %]
                                     <fieldset class="action">
                                         <input type="hidden" name="sortfield" value="title" />
index 6de7978..7aded0b 100644 (file)
@@ -49,7 +49,7 @@
                                 <p><b>[% Tag0X.tag %]</b></p>
                                 <ul>
                                 [% FOREACH subfiel IN Tag0X.subfield %]
-                                    <li><b>[% subfiel.marc_lib.raw %]:</b>
+                                    <li><b>[% subfiel.marc_lib %]:</b>
                                     [% IF subfiel.isurl %]<a href="[% subfiel.marc_value %]">[% subfiel.marc_value %]</a>
                                     [% ELSE %][% subfiel.marc_value %][% END %]</li>
                                 [% END %]
index 6875822..c5cd351 100644 (file)
                                 <input type="hidden" name="koha_login_context" value="opac" />
                                 <fieldset class="brief">
                                     [% FOREACH INPUT IN INPUTS %]
-                                        <input type="hidden" name="[% INPUT.name %]" value="[% INPUT.value %]" />
+                                        <input type="hidden" name="[% INPUT.name |html %]" value="[% INPUT.value |html %]" />
                                     [% END %]
                                     <label for="userid">Login</label>
                                     <input type="text"  size="25" id="userid"  name="userid" />
                                 [% END %]
                                 <div id="nologininstructions">
                                     [% IF Koha.Preference('NoLoginInstructions') %]
-                                        [% Koha.Preference('NoLoginInstructions').raw %]
+                                        [% Koha.Preference('NoLoginInstructions') %]
                                     [% ELSE %]
                                         <h5>Don't have a password yet?</h5><p> If you don't have a password yet, stop by the circulation desk the next time you're in the library. We'll happily set one up for you.</p>
                                         <h5>Don't have a library card?</h5><p> If you don't have a library card, stop by your local library to sign up.</p>
index 214da84..4ebaac6 100644 (file)
@@ -1,12 +1,12 @@
 [% USE Koha %]
 [% PROCESS 'opac-authorities.inc' %]
 [% PROCESS 'authorities-search-results.inc' %]
-[% BLOCK pagination %]
+[% pagination = BLOCK %]
     <div class="pagination">
         <ul>
             [% IF ( displayprev ) %]
                 <li>
-                    <a href="opac-authorities-home.pl?startfrom=[% startfromprev %]&amp;[% FOREACH searchdat IN searchdata %][% searchdat.term %]=[% searchdat.val |url %]&amp;[% END %]resultsperpage=[% resultsperpage %]&amp;type=opac&amp;op=do_search&amp;authtypecode=[% authtypecode %]&amp;orderby=[% orderby %]">
+                    <a href="opac-authorities-home.pl?startfrom=[% startfromprev %]&amp;[% FOREACH searchdat IN searchdata %][% searchdat.term %]=[% searchdat.val |url %]&amp;[% END %]resultsperpage=[% resultsperpage |html %]&amp;type=opac&amp;op=do_search&amp;authtypecode=[% authtypecode %]&amp;orderby=[% orderby|html %]">
                         &laquo;
                     </a>
                 </li>
                 [% IF ( number.highlight ) %]
                     <li class="active"><a href="#">[% number.number %]</a></li>
                 [% ELSE %]
-                    <li><a href="opac-authorities-home.pl?startfrom=[% number.startfrom %]&amp;[% FOREACH searchdat IN number.searchdata %][% searchdat.term %]=[% searchdat.val |url %]&amp;[% END %]resultsperpage=[% resultsperpage %]&amp;type=opac&amp;op=do_search&amp;authtypecode=[% authtypecode %]&amp;orderby=[% orderby %]">[% number.number %]</a></li>
+                    <li><a href="opac-authorities-home.pl?startfrom=[% number.startfrom %]&amp;[% FOREACH searchdat IN number.searchdata %][% searchdat.term %]=[% searchdat.val |url %]&amp;[% END %]resultsperpage=[% resultsperpage |html %]&amp;type=opac&amp;op=do_search&amp;authtypecode=[% authtypecode %]&amp;orderby=[% orderby|html %]">[% number.number %]</a></li>
                 [% END %]
             [% END %]
             [% IF ( displaynext ) %]
                 <li>
-                    <a href="opac-authorities-home.pl?startfrom=[% startfromnext %]&amp;[% FOREACH searchdat IN searchdata %][% searchdat.term %]=[% searchdat.val |url %]&amp;[% END %]&amp;resultsperpage=[% resultsperpage %]&amp;type=opac&amp;op=do_search&amp;authtypecode=[% authtypecode %]&amp;orderby=[% orderby %]">&raquo;</a>
+                    <a href="opac-authorities-home.pl?startfrom=[% startfromnext %]&amp;[% FOREACH searchdat IN searchdata %][% searchdat.term %]=[% searchdat.val |url %]&amp;[% END %]&amp;resultsperpage=[% resultsperpage |html %]&amp;type=opac&amp;op=do_search&amp;authtypecode=[% authtypecode %]&amp;orderby=[% orderby|html %]">&raquo;</a>
                 </li>
             [% END %]
         </ul>
@@ -56,7 +56,7 @@
                     <div id="userauthsearchresults" class="maincontent">
                         <h1>Authority search results</h1>
 
-                        [% PROCESS pagination %]
+                        [% pagination %]
 
                         <div id="results">
                             [% IF ( total ) %]
                                 </table>
                             </div> <!-- / .searchresults -->
 
-                            [% PROCESS pagination %]
+                            [% pagination %]
 
                         [% END # / IF total %]
                     </div> <!-- / #userauthsearchresults -->
index f346965..94d5e0b 100644 (file)
                                 [% FOREACH BIBLIO_RESULT IN BIBLIO_RESULTS %]
                                     <h3>
                                         [% IF ( print_basket ) %]
-                                            [% BIBLIO_RESULT.title %]
-                                                [% IF ( BIBLIO_RESULT.subtitle ) %] [% FOREACH subtitl IN BIBLIO_RESULT.subtitle %] [% subtitl.subfield %] [% END %][% END %]
-                                                [% IF ( BIBLIO_RESULT.author ) %] [% BIBLIO_RESULT.author %][% END %]
+                                            [% BIBLIO_RESULT.title |html %]
+                                                [% IF ( BIBLIO_RESULT.subtitle ) %] [% FOREACH subtitl IN BIBLIO_RESULT.subtitle %] [% subtitl.subfield |html %] [% END %][% END %]
+                                                [% IF ( BIBLIO_RESULT.author ) %] [% BIBLIO_RESULT.author |html %][% END %]
                                         [% ELSE %]
                                                 <input type="checkbox" class="cb" value="[% BIBLIO_RESULT.biblionumber %]" name="bib[% BIBLIO_RESULT.biblionumber %]" id="bib[% BIBLIO_RESULT.biblionumber %]" onclick="selRecord(value,checked)" />
-                                                [% BIBLIO_RESULT.title %]
-                                                [% IF ( BIBLIO_RESULT.subtitle ) %] [% FOREACH subtitl IN BIBLIO_RESULT.subtitle %] [% subtitl.subfield %] [% END %][% END %]
-                                                [% IF ( BIBLIO_RESULT.author ) %] [% BIBLIO_RESULT.author %][% END %]
+                                                [% BIBLIO_RESULT.title |html %]
+                                                [% IF ( BIBLIO_RESULT.subtitle ) %] [% FOREACH subtitl IN BIBLIO_RESULT.subtitle %] [% subtitl.subfield |html %] [% END %][% END %]
+                                                [% IF ( BIBLIO_RESULT.author ) %] [% BIBLIO_RESULT.author |html %][% END %]
                                         [% END # / IF print_basket %]
                                     </h3>
                                     <!-- COinS / Openurl -->
                                                 </td>
                                             [% END %]
                                             <td>
-                                                <a href="#" onclick="openBiblio('[% BIBLIO_RESULT.dest %]',[% BIBLIO_RESULT.biblionumber %])">[% BIBLIO_RESULT.title %][% IF ( BIBLIO_RESULT.subtitle ) %] [% FOREACH subtitl IN BIBLIO_RESULT.subtitle %][% subtitl.subfield %][% END %][% END %]</a>
+                                                <a href="#" onclick="openBiblio('[% BIBLIO_RESULT.dest %]',[% BIBLIO_RESULT.biblionumber %])">[% BIBLIO_RESULT.title |html %][% IF ( BIBLIO_RESULT.subtitle ) %] [% FOREACH subtitl IN BIBLIO_RESULT.subtitle %][% subtitl.subfield |html %][% END %][% END %]</a>
                                                 <!-- COinS / Openurl -->
                                                 <span class="Z3988" title="ctx_ver=Z39.88-2004&amp;rft_val_fmt=info%3Aofi%2Ffmt%3Akev%3Amtx%3Abook&amp;rft.au=[% BIBLIO_RESULT.author %]&amp;rft.btitle=[% BIBLIO_RESULT.title |url %]&amp;rft.date=[% BIBLIO_RESULT.publicationyear %]&amp;rft.tpages=[% BIBLIO_RESULT.item('size') %]&amp;rft.isbn=[% BIBLIO_RESULT.isbn |url %]&amp;rft.aucorp=&amp;rft.place=[% BIBLIO_RESULT.place %]&amp;rft.pub=[% BIBLIO_RESULT.publisher |url %]&amp;rft.edition=[% BIBLIO_RESULT.edition %]&amp;rft.series=[% BIBLIO_RESULT.series %]&amp;rft.genre="></span>
                                                 [% IF ( TagsInputEnabled && loggedinusername ) %]
index 89d05d3..be4776c 100644 (file)
@@ -19,7 +19,7 @@
                     <p>You are not authorized to view this record.</p>
                     [% IF ( OpacSuppressionMessage ) %]
                         <div id="opacsuppressionmessage">
-                            [% OpacSuppressionMessage.raw %]
+                            [% OpacSuppressionMessage %]
                         </div>
                     [% END %]
                 </div>
index ec6f92e..635f8d8 100644 (file)
@@ -32,7 +32,7 @@
                                 <ul>
                                     [% FOREACH HIERARCHY_LOO IN HIERARCHY_LOOP %]
                                         <li>
-                                            <a href="opac-browser.pl?level=[% HIERARCHY_LOO.level %]&amp;filter=[% HIERARCHY_LOO.classification |uri %]">[% HIERARCHY_LOO.description %]</a>
+                                            <a href="opac-browser.pl?level=[% HIERARCHY_LOO.level %]&amp;filter=[% HIERARCHY_LOO.classification |uri %]">[% HIERARCHY_LOO.description |html %]</a>
                                         </li>
                                         <li style="list-style-type: none;">
                                     [% END %]
@@ -43,9 +43,9 @@
                                                     <td>
                                                         <p>
                                                             [% IF ( LEVEL_LOO.endnode ) %]
-                                                                <a href="opac-search.pl?q=Dewey-classification:[% LEVEL_LOO.classification |uri %]">[% LEVEL_LOO.description %]</a>
+                                                                <a href="opac-search.pl?q=Dewey-classification:[% LEVEL_LOO.classification |uri %]">[% LEVEL_LOO.description |html %]</a>
                                                             [% ELSE %]
-                                                                <a href="opac-browser.pl?level=[% LEVEL_LOO.level %]&amp;filter=[% LEVEL_LOO.classification |uri %]">[% LEVEL_LOO.description %]</a>
+                                                                <a href="opac-browser.pl?level=[% LEVEL_LOO.level %]&amp;filter=[% LEVEL_LOO.classification |uri %]">[% LEVEL_LOO.description |html %]</a>
                                                             [% END %]
                                                         </p>
                                                         <p style="font-size:0.75em"><i>([% LEVEL_LOO.number %] biblios)</i></p>
index b9ab8cb..4b3db89 100644 (file)
@@ -24,7 +24,7 @@
     [% SET protocol = "http://" %]
 [% END %]
 [% INCLUDE 'doc-head-open.inc' %]
-<title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle %][% ELSE %]Koha online[% END %] catalog &rsaquo; Details for: [% title %][% FOREACH subtitl IN subtitle %], [% subtitl.subfield %][% END %]</title>
+<title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle %][% ELSE %]Koha online[% END %] catalog &rsaquo; Details for: [% title |html %][% FOREACH subtitl IN subtitle %], [% subtitl.subfield |html %][% END %]</title>
 [% INCLUDE 'doc-head-close.inc' %]
 [% IF ( bidi ) %]
   [% BLOCK cssinclude %]<link rel="stylesheet" type="text/css" href="[% interface %]/[% theme %]/css/right-to-left.css" />[% END %]
@@ -40,7 +40,7 @@
 <div class="main">
     <ul class="breadcrumb">
         <li><a href="/cgi-bin/koha/opac-main.pl">Home</a> <span class="divider">&rsaquo;</span></li>
-        <li><a href="#">Details for: [% title %][% FOREACH subtitl IN subtitle %], [% subtitl.subfield %][% END %]</a></li>
+        <li><a href="#">Details for: [% title |html %][% FOREACH subtitl IN subtitle %], [% subtitl.subfield |html %][% END %]</a></li>
     </ul>
 
     <div class="container-fluid">
                     [% IF ( BakerTaylorEnabled && bt_id ) %]
                         [% IF BakerTaylorBookstoreURL %]
                             [% IF ( OPACURLOpenInNewWindow ) %]
-                                <a href="https://[% BakerTaylorBookstoreURL %][% bt_id %]" target="_blank"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL %][% bt_id %]" /></a>
+                                <a href="https://[% BakerTaylorBookstoreURL |html %][% bt_id %]" target="_blank"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL |html %][% bt_id %]" /></a>
                             [% ELSE %]
-                                <a href="https://[% BakerTaylorBookstoreURL %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL %][% bt_id %]" /></a>
+                                <a href="https://[% BakerTaylorBookstoreURL |html %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL |html %][% bt_id %]" /></a>
                             [% END %]
                         [% ELSE %]
-                            <img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL %][% bt_id %]" />
+                            <img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL |html %][% bt_id %]" />
                         [% END %]
                     [% END %]
                     </div><!-- / #bookcover -->
                         [% IF ( ISBD ) %]<span class="view"><a id="ISBDview" href="/cgi-bin/koha/opac-ISBDdetail.pl?biblionumber=[% biblionumber %]">ISBD view</a></span>[% END %]
                     </div>
                     [% IF ( OPACXSLTDetailsDisplay ) %]
-                        [% XSLTBloc.raw %]
+                        [% XSLTBloc %]
                     [% ELSE %]
-                        <h1 class="title">[% title %][% IF ( subtitle ) %] <span class="subtitle">[% FOREACH subtitl IN subtitle %][% subtitl.subfield %] [% END %]</span>[% END %]</h1>
-                        [% IF ( author ) %]<h5 class="author">by <a href="/cgi-bin/koha/opac-search.pl?q=au:[% author |url %]">[% author %]</a></h5>[% END %]
+                        <h1 class="title">[% title |html %][% IF ( subtitle ) %] <span class="subtitle">[% FOREACH subtitl IN subtitle %][% subtitl.subfield |html %] [% END %]</span>[% END %]</h1>
+                        [% IF ( author ) %]<h5 class="author">by <a href="/cgi-bin/koha/opac-search.pl?q=au:[% author |url %]">[% author |html %]</a></h5>[% END %]
 
                         <span class="results_summary">[% UNLESS ( item_level_itypes ) %]
                             [
                         [% IF ( publishercode ) %]
                             <span class="results_summary publisher"><span class="label">Published by :</span>
                                 <a href="/cgi-bin/koha/opac-search.pl?q=pb:[% publishercode |url %] ">
-                                    [% publishercode %]
+                                    [% publishercode |html %]
                                 </a> [% IF ( place ) %]([% place %])[% END %] [% IF ( publicationyear ) %], [% publicationyear %][% END %]
                             </span>
                         [% END %]
                             <span class="label">Tags from this library:</span>
                             <ul id="tagslist">
                                 [% FOREACH TagLoo IN TagLoop %]
-                                    <li><a href="/cgi-bin/koha/opac-search.pl?tag=[% TagLoo.term |url %]&amp;q=[% TagLoo.term |url %]">[% TagLoo.term %]</a> <span class="weight">([% TagLoo.weight_total %])</span>
+                                    <li><a href="/cgi-bin/koha/opac-search.pl?tag=[% TagLoo.term |url %]&amp;q=[% TagLoo.term |url %]">[% TagLoo.term |html %]</a> <span class="weight">([% TagLoo.weight_total %])</span>
                                     [% IF ( loop.last ) %][% ELSE %], [% END %]
                                     </li>
                                 [% END %]
                     [% IF ( BakerTaylorContentURL ) %]
                         <span class="results_summary">
                         <span class="label">Enhanced content: </span>
-                              [% IF ( OPACURLOpenInNewWindow ) %]<a href="[% BakerTaylorContentURL %]" target="_blank">Content Cafe</a>[% ELSE %]<a href="[% BakerTaylorContentURL %]">Content Cafe</a>[% END %]
+                              [% IF ( OPACURLOpenInNewWindow ) %]<a href="[% BakerTaylorContentURL |html %]" target="_blank">Content Cafe</a>[% ELSE %]<a href="[% BakerTaylorContentURL |html %]">Content Cafe</a>[% END %]
                         </span>
                     [% END # / IF BakerTaylorContentURL %]
 
                                                 <small>[% review.datereviewed | $KohaDates %]</small>
                                                 <p>
                                                     [% FILTER html_break %]
-                                                        [% review.review %]
+                                                        [% review.review |html %]
                                                     [% END %]
                                                     <a href="#" onclick="Dopop('/cgi-bin/koha/opac-review.pl?biblionumber=[% review.biblionumber %]&amp;reviewid=[% review.reviewid %]');">Edit</a>
                                                 </p>
                                                 [% END # / IF ShowReviewer != "none"%]
                                                 <p>
                                                   [% FILTER html_break %]
-                                                  [% review.review %]
+                                                  [% review.review |html %]
                                                   [% END %]
                                                 </p>
                                             </div> <!-- / .commentline -->
                                             [% UNLESS ( item_level_itypes ) %]
                                                 <td>[% XISBN.description %]</td>
                                             [% END %]
-                                            <td><a href="/cgi-bin/koha/opac-detail.pl?biblionumber=[% XISBN.biblionumber %]">[% XISBN.title %]</a>
-                                                [% IF ( XISBN.author ) %] by [% XISBN.author %][% END %]
+                                            <td><a href="/cgi-bin/koha/opac-detail.pl?biblionumber=[% XISBN.biblionumber %]">[% XISBN.title |html %]</a>
+                                                [% IF ( XISBN.author ) %] by [% XISBN.author |html %][% END %]
                                                 [% IF ( XISBN.copyrightdate ) %] &copy;[% XISBN.copyrightdate %][% END %]
                                                 [% IF ( XISBN.publishercode ) %]
-                                                    <p>[% XISBN.publishercode %]
+                                                    <p>[% XISBN.publishercode |html %]
                                                         [% IF ( XISBN.place ) %]([% XISBN.place %])[% END %]
                                                         [% IF ( XISBN.publicationyear ) %], [% XISBN.publicationyear %][% END %]
                                                         [% IF ( XISBN.pages ) %][% XISBN.pages %] [% XISBN.illus %] [% XISBN.size %][% END %]
                         <ul class="pg_menu clearfix">
                             <li class="left_results">
                                 [% IF ( previousBiblionumber ) %]
-                                    <a href="opac-detail.pl?biblionumber=[% previousBiblionumber %][% IF ( query_desc && OpacHighlightedWords ) %]&query_desc=[% query_desc |uri %][% END %]" title="See: [% IF ( previousTitle ) %][% previousTitle %][% ELSE %]previous biblio[% END %]">&laquo; Previous</a>
+                                    <a href="opac-detail.pl?biblionumber=[% previousBiblionumber %][% IF ( query_desc && OpacHighlightedWords ) %]&query_desc=[% query_desc |uri %][% END %]" title="See: [% IF ( previousTitle ) %][% previousTitle |html %][% ELSE %]previous biblio[% END %]">&laquo; Previous</a>
                                 [% ELSE %]
                                     <span>Previous</span>
                                 [% END %]
                             <li class="back_results"><a href="opac-search.pl?[% busc %]" title="Back to the results search list">Back to results</a></li>
                             <li class="right_results">
                                 [% IF ( nextBiblionumber ) %]
-                                    <a href="opac-detail.pl?biblionumber=[% nextBiblionumber %][% IF ( query_desc && OpacHighlightedWords ) %]&query_desc=[% query_desc |uri %][% END %]" title="See: [% IF ( nextTitle ) %][% nextTitle %][% ELSE %]next biblio[% END %]">Next &raquo;</a>
+                                    <a href="opac-detail.pl?biblionumber=[% nextBiblionumber %][% IF ( query_desc && OpacHighlightedWords ) %]&query_desc=[% query_desc |uri %][% END %]" title="See: [% IF ( nextTitle ) %][% nextTitle |html %][% ELSE %]next biblio[% END %]">Next &raquo;</a>
                                 [% ELSE %]
                                     <span>Next</span>
                                 [% END %]
                                         <span>[% ITEM_RESULT.branchname %]</span>
                                     [% END %]
                                 </span>
-                                <div class="branch-info-tooltip">[% ITEM_RESULT.holding_branch_opac_info.raw %]</div>
+                                <div class="branch-info-tooltip">[% ITEM_RESULT.holding_branch_opac_info %]</div>
 
                                 [% IF ( OpacLocationBranchToDisplayShelving == 'holding' || OpacLocationBranchToDisplayShelving == 'both' ) %]
                                     <span class="shelvingloc">[% ITEM_RESULT.location_description %]</span>
                                         <span>[% Branches.GetName( ITEM_RESULT.homebranch ) %]</span>
                                     [% END %]
                                 </span>
-                                <div class="branch-info-tooltip">[% ITEM_RESULT.home_branch_opac_info.raw %]</div>
+                                <div class="branch-info-tooltip">[% ITEM_RESULT.home_branch_opac_info %]</div>
 
                                 [% IF ( OpacLocationBranchToDisplayShelving == 'home' || OpacLocationBranchToDisplayShelving == 'both' ) %]
                                     <span class="shelvingloc">[% ITEM_RESULT.location_description %]</span>
             [% FOREACH listResult IN listResults %]
                 arrPagination[[% listResult.index %]] = {
                     url:"[% listResult.url %][% IF ( listResult.url && query_desc && OpacHighlightedWords ) %]&query_desc=[% query_desc |uri %][% END %]",
-                    title:"[% listResult.title|remove('\n') %]",
-                    author:"[% listResult.author %]",
+                    title:"[% listResult.title|remove('\n')|html %]",
+                    author:"[% listResult.author|html %]",
                     biblionumber:[% listResult.biblionumber %]
                 };
            [% END %]
             ]
         }));
 
-        [% IF ( query_desc ) %][% IF ( OpacHighlightedWords ) %]var query_desc = "[% query_desc |replace("'", "\'") |replace('\n', '\\n') |replace('\r', '\\r') %]";
+        [% IF ( query_desc ) %][% IF ( OpacHighlightedWords ) %]var query_desc = "[% query_desc |replace("'", "\'") |replace('\n', '\\n') |replace('\r', '\\r') |html %]";
             q_array = query_desc.split(" ");
             q_array = q_array.filter(function(n){ return n }); // Remove empty strings
             highlightOn();
index 8e00cf3..f7eebd8 100644 (file)
@@ -22,7 +22,7 @@
                                 [% END %]
                             </select>
                             <fieldset class="action">
-                                <input type="hidden" name="bib_list" value="[% bib_list %]" />
+                                <input type="hidden" name="bib_list" value="[% bib_list | html %]" />
                                 <input type="submit" name="save" value="Go" />
                                     <a class="cancel close" href="#">Cancel</a>
                             </fieldset>
index 6a30d33..4e4f832 100644 (file)
                                             <option value="isbd">ISBD</option>
                                             <option value="iso2709">MARC</option>
                                             [% FOREACH csv_profile IN csv_profiles %]
-                                            <option value="[% csv_profile.export_format_id %]">CSV - [% csv_profile.profile %]</option>
+                                            <option value="[% csv_profile.export_format_id |html %]">CSV - [% csv_profile.profile |html %]</option>
                                             [% END %]
                                         </select>
                                         <span class="required">Required</span>
                                     </fieldset>
 
                                     <fieldset class="action">
-                                        <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber %]" />
+                                        <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
                                         <input type="submit" name="save" class="btn" value="Go" />
-                                        <a href="/cgi-bin/koha/opac-shelves.pl?op=view&amp;shelfnumber=[% shelf.shelfnumber %]" class="cancel close" data-dismiss="modal">Cancel</a>
+                                        <a href="/cgi-bin/koha/opac-shelves.pl?op=view&amp;shelfnumber=[% shelf.shelfnumber | html %]" class="cancel close" data-dismiss="modal">Cancel</a>
                                     </fieldset>
                                 </form>
                                 [% IF ( modal ) %]
index a14e48c..9598f4d 100644 (file)
@@ -1,6 +1,6 @@
 [% USE Koha %]
 [% INCLUDE 'doc-head-open.inc' %]
-<title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle %][% ELSE %]Koha online[% END %] catalog &rsaquo; Images for: [% biblio.title %]</title>
+<title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle %][% ELSE %]Koha online[% END %] catalog &rsaquo; Images for: [% biblio.title |html %]</title>
 [% INCLUDE 'doc-head-close.inc' %]
 [% BLOCK cssinclude %]
     <style type="text/css">
index 467dbe6..798c90e 100644 (file)
@@ -44,7 +44,7 @@
                 [% FOREACH koha_new IN koha_news %]
                     <div class="newsitem">
                         <a name="newsitem[% koha_new.idnew %]"></a><h4 class="newsheader">[% koha_new.title %]</h4>
-                        <div class="newsbody">[% koha_new.new.raw %]</div>
+                        <div class="newsbody">[% koha_new.new %]</div>
                         <div class="newsfooter">(published on [% koha_new.newdate %][% IF ( (newsdisp == 'opac' || newsdisp == 'both') && koha_new.borrowernumber ) %] by <span class="newsauthor_title">[% koha_new.author_title %] </span>[% koha_new.author_firstname %] [% koha_new.author_surname %][% END %])</div>
                     </div>
                 [% END %]
@@ -65,7 +65,7 @@
             </div>
         [% END %]
 
-        [% IF ( OpacMainUserBlock ) %]<div id="opacmainuserblock">[% OpacMainUserBlock.raw %]</div>[% END %]
+        [% IF ( OpacMainUserBlock ) %]<div id="opacmainuserblock">[% OpacMainUserBlock %]</div>[% END %]
         </div> <!-- / .span 7/9 -->
 
         [% IF ( ( Koha.Preference( 'opacuserlogin' ) == 1 ) || OpacNavRight ) %]
@@ -92,7 +92,7 @@
                                 [% END %]
                                 [% IF Koha.Preference( 'NoLoginInstructions' ) %]
                                     <div id="nologininstructions-main">
-                                        [% Koha.Preference( 'NoLoginInstructions' ).raw %]
+                                        [% Koha.Preference( 'NoLoginInstructions' ) %]
                                     </div>
                                 [% END %]
                                 </form>
                 [% END # /opacuserlogin %]
                 [% IF ( OpacNavRight ) %]
                     <div id="opacnavright">
-                        [% OpacNavRight.raw %]
+                        [% OpacNavRight %]
                     </div>
                 [% END # /OpacNavRight %]
             </div> <!-- / .span3 -->
index ae5e1ca..53550af 100644 (file)
       <webMaster></webMaster>
       [% FOREACH message_lis IN message_list %]
       <item>
-        <title>[% message_lis.subject %]</title>
-        <link>[% message_lis.title %]</link>
-        <description>[% message_lis.content %]</description>
-        <pubDate>[% message_lis.time_queued %]</pubDate>
-        <guid>[% message_lis.title %]</guid>
+        <title>[% message_lis.subject |html %]</title>
+        <link>[% message_lis.title |html %]</link>
+        <description>[% message_lis.content |html %]</description>
+        <pubDate>[% message_lis.time_queued |html %]</pubDate>
+        <guid>[% message_lis.title |html %]</guid>
       </item>
       [% END %]
    </channel>
index 806fd04..ac952f5 100644 (file)
@@ -7,9 +7,9 @@
       <description></description>
       [% FOREACH newsitem IN koha_news %]
       <item>
-        <title>[% newsitem.title %]</title>
-        <description>[% newsitem.new.raw %]</description>
-        <guid>[% OPACBaseURL %]/cgi-bin/koha/opac-main.pl#newsitem[% newsitem.idnew %]</guid>
+        <title>[% newsitem.title |html %]</title>
+        <description>[% newsitem.new |html %]</description>
+        <guid>[% OPACBaseURL %]/cgi-bin/koha/opac-main.pl#newsitem[% newsitem.idnew |html %]</guid>
       </item>
       [% END %]
    </channel>
index d23481e..09f1a72 100644 (file)
@@ -2,10 +2,10 @@
 [% USE Koha %]
 [% IF ( opensearchdescription ) %]
 <OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/">
-   <ShortName>[% LibraryName %] Search</ShortName>
-   <Description>Search the [% LibraryName %]</Description>
-   <Tags>koha opac [% LibraryName %]</Tags>
-   <Contact>[% KohaAdminEmailAddress %]</Contact>
+   <ShortName>[% LibraryName |html %] Search</ShortName>
+   <Description>Search the [% LibraryName |html %]</Description>
+   <Tags>koha opac [% LibraryName |html %]</Tags>
+   <Contact>[% KohaAdminEmailAddress |html %]</Contact>
    <Url type="application/rss+xml"
         template="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?q={searchTerms}&amp;pw={startPage?}&amp;format=rss2"/>
 </OpenSearchDescription>
       xmlns:dc="http://purl.org/dc/elements/1.1/"
       xmlns:atom="http://www.w3.org/2005/Atom">
    <channel>
-     <title><![CDATA[[% LibraryName %] Search [% IF ( query_desc ) %]for '[% query_desc %]'[% END %][% IF ( limit_desc ) %] with limit(s): '[% limit_desc %]'[% END %]]]></title>
-     <link>[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi %][% limit_cgi %]&amp;format=rss2</link>
-     <atom:link rel="self" type="application/rss+xml" href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi %][% limit_cgi %]&amp;sort_by=[% sort_by %]&amp;format=rss2"/>
-     <description><![CDATA[ Search results [% IF ( query_desc ) %]for '[% query_desc %]'[% END %][% IF ( limit_desc ) %] with limit(s): '[% limit_desc %]'[% END %] at [% LibraryName %]]]></description>
+     <title><![CDATA[[% LibraryName |html %] Search [% IF ( query_desc ) %]for '[% query_desc |html %]'[% END %][% IF ( limit_desc ) %] with limit(s): '[% limit_desc |html %]'[% END %]]]></title>
+     <link>[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi |html %][% limit_cgi |html %]&amp;format=rss2</link>
+     <atom:link rel="self" type="application/rss+xml" href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi |html %][% limit_cgi |html %]&amp;sort_by=[% sort_by |html %]&amp;format=rss2"/>
+     <description><![CDATA[ Search results [% IF ( query_desc ) %]for '[% query_desc |html %]'[% END %][% IF ( limit_desc ) %] with limit(s): '[% limit_desc |html %]'[% END %] at [% LibraryName |html %]]]></description>
      <opensearch:totalResults>[% total %]</opensearch:totalResults>
      <opensearch:startIndex>[% offset %]</opensearch:startIndex>
      [% IF ( results_per_page ) %]
-       <opensearch:itemsPerPage>[% results_per_page%]</opensearch:itemsPerPage>
+       <opensearch:itemsPerPage>[% results_per_page |html%]</opensearch:itemsPerPage>
      [% ELSE %]
        <opensearch:itemsPerPage>20</opensearch:itemsPerPage>
      [% END %]
         [% FOREACH SEARCH_RESULT IN SEARCH_RESULTS %]
-     <atom:link rel="search" type="application/opensearchdescription+xml" href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% SEARCH_RESULT.query_cgi %][% SEARCH_RESULT.limit_cgi %]&amp;sort_by=[% SEARCH_RESULT.sort_by %]&amp;format=opensearchdescription"/>
+     <atom:link rel="search" type="application/opensearchdescription+xml" href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% SEARCH_RESULT.query_cgi |html %][% SEARCH_RESULT.limit_cgi |html %]&amp;sort_by=[% SEARCH_RESULT.sort_by |html %]&amp;format=opensearchdescription"/>
      <opensearch:Query role="request" searchTerms="[% SEARCH_RESULT.query_desc |url %][% SEARCH_RESULT.limit_desc |url %]" startPage="[% SEARCH_RESULT.page %]" />
      <item>
-       <title>[% SEARCH_RESULT.title %] [% FOREACH subtitl IN SEARCH_RESULT.subtitle %], [% subtitl.subfield %][% END %]</title>
-       <dc:identifier>ISBN [% SEARCH_RESULT.isbn %]</dc:identifier>
+       <title>[% SEARCH_RESULT.title |html %] [% FOREACH subtitl IN SEARCH_RESULT.subtitle %], [% subtitl.subfield |html %][% END %]</title>
+       <dc:identifier>ISBN [% SEARCH_RESULT.isbn |html %]</dc:identifier>
        <link>[% IF ( SEARCH_RESULT.BiblioDefaultViewmarc ) %][% OPACBaseURL %]/cgi-bin/koha/opac-MARCdetail.pl?biblionumber=[% SEARCH_RESULT.biblionumber %][% ELSE %][% IF ( SEARCH_RESULT.BiblioDefaultViewisbd ) %][% OPACBaseURL %]/cgi-bin/koha/opac-ISBDdetail.pl?biblionumber=[% SEARCH_RESULT.biblionumber %][% ELSE %][% OPACBaseURL %]/cgi-bin/koha/opac-detail.pl?biblionumber=[% SEARCH_RESULT.biblionumber %][% END %][% END %]</link>
        <description><![CDATA[
 [% IF ( OPACAmazonCoverImages ) %][% IF ( SEARCH_RESULT.normalized_isbn ) %]<img src="https://images-na.ssl-images-amazon.com/images/P/[% SEARCH_RESULT.normalized_isbn %].01.TZZZZZZZ.jpg" alt="" />[% END %][% END %]
 [% END %][% END %][% END %]
 
 [% bt_id = ( SEARCH_RESULT.normalized_upc || SEARCH_RESULT.normalized_isbn ) %]
-[% IF ( BakerTaylorEnabled ) %][% IF bt_id %]<a href="https://[% BakerTaylorBookstoreURL %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL %][% bt_id %]" /></a>[% END %][% END %]
-        <p>[% IF ( SEARCH_RESULT.author ) %]By [% SEARCH_RESULT.author %]. [% END %]
-        [% IF ( SEARCH_RESULT.place ) %][% SEARCH_RESULT.place %] [% END %][% IF ( SEARCH_RESULT.publishercode ) %][% SEARCH_RESULT.publishercode %][% END %][% IF ( SEARCH_RESULT.publicationyear ) %] [% SEARCH_RESULT.publicationyear %]
-                    [% ELSE %][% IF ( SEARCH_RESULT.copyrightdate ) %] [% SEARCH_RESULT.copyrightdate %][% END %][% END %]
-                        [% IF ( SEARCH_RESULT.pages ) %]. [% SEARCH_RESULT.pages %][% END %]
-                        [% IF ( SEARCH_RESULT.notes ) %], [% SEARCH_RESULT.notes %][% END %]
-                        [% IF ( SEARCH_RESULT.size ) %] [% SEARCH_RESULT.size %]. [% END %]
-                        [% IF ( SEARCH_RESULT.isbn ) %] [% SEARCH_RESULT.isbn %][% END %]
+[% IF ( BakerTaylorEnabled ) %][% IF bt_id %]<a href="https://[% BakerTaylorBookstoreURL |html %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL |html %][% bt_id %]" /></a>[% END %][% END %]
+          <p>[% IF ( SEARCH_RESULT.author ) %]By [% SEARCH_RESULT.author |html %]. [% END %]
+          [% IF ( SEARCH_RESULT.place ) %][% SEARCH_RESULT.place |html %] [% END %][% IF ( SEARCH_RESULT.publishercode ) %][% SEARCH_RESULT.publishercode |html %][% END %][% IF ( SEARCH_RESULT.publicationyear ) %] [% SEARCH_RESULT.publicationyear |html %]
+                    [% ELSE %][% IF ( SEARCH_RESULT.copyrightdate ) %] [% SEARCH_RESULT.copyrightdate |html %][% END %][% END %]
+                        [% IF ( SEARCH_RESULT.pages ) %]. [% SEARCH_RESULT.pages |html %][% END %]
+                        [% IF ( SEARCH_RESULT.notes ) %], [% SEARCH_RESULT.notes |html %][% END %]
+                        [% IF ( SEARCH_RESULT.size ) %] [% SEARCH_RESULT.size |html %]. [% END %]
+                        [% IF ( SEARCH_RESULT.isbn ) %] [% SEARCH_RESULT.isbn |html %][% END %]
        </p>
 [% IF Koha.Preference( 'RequestOnOpac' ) == 1 %]
 <p><a href="[% OPACBaseURL %]/cgi-bin/koha/opac-reserve.pl?biblionumber=[% SEARCH_RESULT.biblionumber %]">Place Hold on <i>[% SEARCH_RESULT.title %]</i></a></p>
 [% IF ( atom ) %]
 <feed xmlns="http://www.w3.org/2005/Atom"
        xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
-   <id>[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi %][% limit_cgi %]&amp;format=atom</id>
-   <title>[% LibraryName %] Search [% IF ( query_desc ) %]for '[% query_desc %]'[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s):&nbsp;'[% limit_desc %]'[% END %]</title>
-    <link href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi %][% limit_cgi %]&amp;format=rss2"/>
+   <id>[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi |html %][% limit_cgi |html %]&amp;format=atom</id>
+   <title>[% LibraryName |html %] Search [% IF ( query_desc ) %]for '[% query_desc |html %]'[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s):&nbsp;'[% limit_desc |html %]'[% END %]</title>
+    <link href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi |html %][% limit_cgi |html %]&amp;format=rss2"/>
    <updated>[% timestamp %]</updated>
    <author>
-     <name>[% LibraryName %]</name>
+     <name>[% LibraryName |html %]</name>
    </author>
    <!-- <id>urn:uuid:60a76c80-d399-11d9-b93C-0003939e0af6</id> -->
    <opensearch:totalResults>[% total %]</opensearch:totalResults>
@@ -82,7 +82,7 @@
    [% ELSE %]
      <opensearch:itemsPerPage>20</opensearch:itemsPerPage>
    [% END %]
-   <opensearch:Query role="request" searchTerms="[% query_desc %] [% limit_desc %]" startPage="[% page %]" />
+   <opensearch:Query role="request" searchTerms="[% query_desc |html %] [% limit_desc |html %]" startPage="[% page |html %]" />
    <link rel="alternate" href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi %][% limit_cgi %]pw=[% page %]&amp;format=atom" type="application/atom+xml"/>
    <link rel="self" href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi %][% limit_cgi %]&amp;format=atom" type="application/atom+xml"/>
    <link rel="first" href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi %][% limit_cgi %]pw=1&amp;format=atom" type="application/atom+xml"/>
@@ -93,7 +93,7 @@
 
    [% FOREACH SEARCH_RESULT IN SEARCH_RESULTS %]
    <entry>
-     <title>[% SEARCH_RESULT.title %]</title>
+     <title>[% SEARCH_RESULT.title |html %]</title>
      <link href="[% OPACBaseURL %]/cgi-bin/koha/opac-detail.pl?biblionumber=[% SEARCH_RESULT.biblionumber %]"/>
      <!-- <id>urn:uuid:1225c695-cfb8-4ebb-aaaa-80da344efa6a</id> -->
      <updated>[% SEARCH_RESULT.timestamp %]</updated>
index 0acd934..5f5a836 100644 (file)
@@ -1,6 +1,6 @@
 [% USE Koha %]
 [% INCLUDE 'doc-head-open.inc' %]
-<title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle %][% ELSE %]Koha online[% END %] catalog &rsaquo; OverDrive search for '[% q %]'</title>
+<title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle %][% ELSE %]Koha online[% END %] catalog &rsaquo; OverDrive search for '[% q | html %]'</title>
 [% INCLUDE 'doc-head-close.inc' %]
 [% BLOCK cssinclude %]
 <link rel="stylesheet" type="text/css" href="[% interface %]/[% theme %]/css/jquery.rating.css" />
@@ -17,7 +17,7 @@
     <div class="main">
         <ul class="breadcrumb">
             <li><a href="/cgi-bin/koha/opac-main.pl">Home</a> <span class="divider">&rsaquo;</span></li>
-            <li><a href="#">OverDrive search for '[% q %]'</a></li>
+            <li><a href="#">OverDrive search for '[% q | html %]'</a></li>
         </ul>
 
         <div class="container-fluid">
@@ -29,7 +29,7 @@
                 </div>
                 <div class="span10">
                     <div id="overdrive-results-content" class="maincontent searchresults">
-                        <h1>OverDrive search for '[% q %]'</h1>
+                        <h1>OverDrive search for '[% q | html %]'</h1>
                             <div id="breadcrumbs">
                                 <p></p>
                             </div>
@@ -60,7 +60,7 @@
 <script type="text/javascript" src="[% interface %]/[% theme %]/js/overdrive.js"></script>
 <script type="text/javascript" src="[% interface %]/[% theme %]/lib/jquery/plugins/jquery.rating.js"></script>
 <script type="text/javascript">
-var querystring = "[% q |replace( "'", "\'" ) |replace( '\n', '\\n' ) |replace( '\r', '\\r' ) %]";
+var querystring = "[% q |replace( "'", "\'" ) |replace( '\n', '\\n' ) |replace( '\r', '\\r' ) |html %]";
 var results_per_page = [% OPACnumSearchResults %];
 
 function fetch_availability( prod, $tr ) {
index 74e212f..2eb7ead 100644 (file)
                                                 [% IF BakerTaylorEnabled %]
                                                     [% bt_id = ( issue.normalized_upc || issue.normalized_isbn ) %]
                                                     [% IF ( bt_id ) %]
-                                                       <a href="https://[% BakerTaylorBookstoreURL %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL %][% bt_id %]" /></a>
+                                                       <a href="https://[% BakerTaylorBookstoreURL |html %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL |html %][% bt_id %]" /></a>
                                                     [% ELSE %]
                                                        <span class="no-image">No cover image available</span>
                                                     [% END %]
                                                 </td>
                                                 <td>
                                                 [% IF  issue.BiblioDefaultViewmarc %]
-                                                     <a class="title" href="/cgi-bin/koha/opac-MARCdetail.pl?biblionumber=[% issue.biblionumber |url %]">[% issue.title %] [% IF  issue.subtitle  %][% FOREACH subtitl IN issue.subtitle %][% subtitl.subfield %][% END %][% END %]</a>
+                                                     <a class="title" href="/cgi-bin/koha/opac-MARCdetail.pl?biblionumber=[% issue.biblionumber |url %]">[% issue.title |html %] [% IF  issue.subtitle  %][% FOREACH subtitl IN issue.subtitle %][% subtitl.subfield %][% END %][% END %]</a>
                                                 [% ELSIF issue.BiblioDefaultViewisbd %]
-                                                     <a class="title" href="/cgi-bin/koha/opac-ISBDdetail.pl?biblionumber=[% issue.biblionumber |url %]">[% issue.title %] [% IF issue.subtitle %][% FOREACH subtitl IN issue.subtitle %][% subtitl.subfield %][% END %][% END %]</a>
+                                                     <a class="title" href="/cgi-bin/koha/opac-ISBDdetail.pl?biblionumber=[% issue.biblionumber |url %]">[% issue.title |html %] [% IF issue.subtitle %][% FOREACH subtitl IN issue.subtitle %][% subtitl.subfield %][% END %][% END %]</a>
                                                 [% ELSE %]
-                                                     <a class="title" href="/cgi-bin/koha/opac-detail.pl?biblionumber=[% issue.biblionumber |url %]">[% issue.title %] [% IF issue.subtitle %][% FOREACH subtitl IN issue.subtitle %][% subtitl.subfield %][% END %][% END %]</a>
+                                                     <a class="title" href="/cgi-bin/koha/opac-detail.pl?biblionumber=[% issue.biblionumber |url %]">[% issue.title |html %] [% IF issue.subtitle %][% FOREACH subtitl IN issue.subtitle %][% subtitl.subfield %][% END %][% END %]</a>
                                                 [% END %]
                                                 <span class="item-details">[% issue.author %]</span>
                                                 </td>
                                                     [% END %]
                                                 </td>
                                                 [% IF OPACMySummaryHTML %]
-                                                    <td>[% issue.MySummaryHTML.raw %]</td>
+                                                    <td>[% issue.MySummaryHTML %]</td>
                                                 [% END %]
                                                 </tr>
                                             [% END # / FOREACH issue %]
index 27ccf27..eb74172 100644 (file)
@@ -52,7 +52,7 @@
 
                         <p id="patron-instructions">For your convenience, the login box on this page has been pre-filled with this data. Please log in[% IF OpacPasswordChange %] and change your password[% END %].</p>
 
-                        <div id="PatronSelfRegistrationAdditionalInstructions">[% PatronSelfRegistrationAdditionalInstructions.raw %]</div>
+                        <div id="PatronSelfRegistrationAdditionalInstructions">[% PatronSelfRegistrationAdditionalInstructions %]</div>
                     </div>
 
                 </div> <!-- / .span7/9 -->
@@ -84,7 +84,7 @@
                             [% END # /opacuserlogin %]
                             [% IF ( OpacNavRight ) %]
                                 <div id="opacnavright">
-                                    [% OpacNavRight.raw %]
+                                    [% OpacNavRight %]
                                 </div>
                             [% END # /OpacNavRight %]
                         </div> <!-- / .span3 -->
index 327d2fc..de7e3e8 100644 (file)
                                             [% END # / bibitemloo.holdable %]
 
                                             <a class="title" href="/cgi-bin/koha/opac-detail.pl?biblionumber=[% bibitemloo.biblionumber %]">
-                                                [% bibitemloo.title %]
+                                                [% bibitemloo.title |html %]
                                                 [% IF ( bibitemloo.subtitle ) %]
                                                     [% FOREACH subtitl IN bibitemloo.subtitle %]
                                                         [% subtitl.subfield %]
index 4b84ba3..fbb63a2 100644 (file)
@@ -38,7 +38,7 @@
                     [% IF Koha.Preference('RestrictedPageTitle') %]
                         <h1>[% Koha.Preference('RestrictedPageTitle') %]</h1>
                     [% END %]
-                    [% Koha.Preference('RestrictedPageContent').raw %]
+                    [% Koha.Preference('RestrictedPageContent') %]
                 </div>
             </div> <!-- / .span10 -->
         </div> <!-- / .row-fluid -->
index 66be780..b36dacb 100644 (file)
@@ -2,14 +2,14 @@
 [% INCLUDE 'doc-head-open.inc' %]
 <title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle %][% ELSE %]Koha online[% END %] catalog &rsaquo;
 [% IF ( searchdesc ) %]
-    Results of search [% IF ( query_desc ) %]for '[% query_desc %]'[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s):&nbsp;'[% limit_desc %]'[% END %]
+    Results of search [% IF ( query_desc ) %]for '[% query_desc | html %]'[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s):&nbsp;'[% limit_desc | html %]'[% END %]
 [% ELSE %]
     You did not specify any search criteria.
 [% END %]</title>
 [% INCLUDE 'doc-head-close.inc' %]
 [% BLOCK cssinclude %][% END %]
 <link rel="alternate" type="application/rss+xml" title="Koha - RSS"
-href="/cgi-bin/koha/opac-rss.pl?[% query_cgi %][% limit_cgi %]" />
+href="/cgi-bin/koha/opac-rss.pl?[% query_cgi %][% limit_cgi |html %]" />
 
 </head>
 [% INCLUDE 'bodytag.inc' bodyid='results-grouped' %]
@@ -20,7 +20,7 @@ href="/cgi-bin/koha/opac-rss.pl?[% query_cgi %][% limit_cgi %]" />
             <li><a href="/cgi-bin/koha/opac-main.pl">Home</a> <span class="divider">&rsaquo;</span></li>
             <li>
                 [% IF ( searchdesc ) %]
-                    <a href="#">Results of search [% IF ( query_desc ) %]for '[% query_desc %]'[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s):&nbsp;'[% limit_desc %]'[% END %]</a>
+                    <a href="#">Results of search [% IF ( query_desc ) %]for '[% query_desc | html %]'[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s):&nbsp;'[% limit_desc | html %]'[% END %]</a>
                 [% ELSE %]
                     <a href="#">You did not specify any search criteria.</a>
                 [% END %]
@@ -104,7 +104,7 @@ href="/cgi-bin/koha/opac-rss.pl?[% query_cgi %][% limit_cgi %]" />
                                                 [% FOREACH SEARCH_RESULT IN SEARCH_RESULTS %]
                                                 <tr>
                                                     <td>
-                                                        <a href="/cgi-bin/koha/opac-search.pl?q=[% SEARCH_RESULT.scan_use |url %]&quot;[% SEARCH_RESULT.title |url %]&quot;">[% SEARCH_RESULT.title %]</a>
+                                                        <a href="/cgi-bin/koha/opac-search.pl?q=[% SEARCH_RESULT.scan_use |url %]&quot;[% SEARCH_RESULT.title |url %]&quot;">[% SEARCH_RESULT.title |html %]</a>
                                                     </td>
                                                     <td>
                                                         [% FOREACH subtitl IN SEARCH_RESULT.subtitle %]
@@ -122,10 +122,10 @@ href="/cgi-bin/koha/opac-rss.pl?[% query_cgi %][% limit_cgi %]" />
                                     <form action="/cgi-bin/koha/opac-search.pl" method="get" name="bookbag_form" id="bookbag_form">
                                         [% IF ( searchdesc ) %]
                                             [% FOREACH QUERY_INPUT IN QUERY_INPUTS %]
-                                                <input type="hidden" name="[% QUERY_INPUT.input_name %]" value="[% QUERY_INPUT.input_value %]"/>
+                                                <input type="hidden" name="[% QUERY_INPUT.input_name |html %]" value="[% QUERY_INPUT.input_value |html %]"/>
                                             [% END %]
                                             [% FOREACH LIMIT_INPUT IN LIMIT_INPUTS %]
-                                                <input type="hidden" name="[% LIMIT_INPUT.input_name %]" value="[% LIMIT_INPUT.input_value %]"/>
+                                                <input type="hidden" name="[% LIMIT_INPUT.input_name |html %]" value="[% LIMIT_INPUT.input_value |html %]"/>
                                             [% END %]
                                         [% END %]
 
@@ -323,7 +323,7 @@ $(document).ready(function(){
         return false;
     });
     [% IF ( query_desc ) %]
-    var query_desc = "[% query_desc |replace("'", "\'") |replace('\n', '\\n') |replace('\r', '\\r') %]";
+    var query_desc = "[% query_desc |replace("'", "\'") |replace('\n', '\\n') |replace('\r', '\\r') |html %]";
     q_array = query_desc.split(" ");
     // ensure that we don't have "" at the end of the array, which can
     // break the highlighter
index efd97c2..8eeb200 100644 (file)
@@ -5,7 +5,7 @@
 [% INCLUDE 'doc-head-open.inc' %]
 <title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle %][% ELSE %]Koha online[% END %] catalog &rsaquo;
 [% IF ( searchdesc ) %]
-    Results of search [% IF ( query_desc ) %]for '[% query_desc%]'[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s):&nbsp;'[% limit_desc %]'[% END %]
+    Results of search [% IF ( query_desc ) %]for '[% query_desc | html%]'[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s):&nbsp;'[% limit_desc | html %]'[% END %]
 [% ELSE %]
     You did not specify any search criteria.
 [% END %]</title>
@@ -16,7 +16,7 @@
     [% END %]
 [% END %]
 
-<link rel="alternate" type="application/rss+xml" title="[% LibraryName %] Search RSS feed" href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi | url %][% limit_cgi |uri %]&amp;count=[% countrss |uri %]&amp;sort_by=acqdate_dsc&amp;format=rss2" />
+<link rel="alternate" type="application/rss+xml" title="[% LibraryName |html %] Search RSS feed" href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi | url %][% limit_cgi |uri %]&amp;count=[% countrss |uri %]&amp;sort_by=acqdate_dsc&amp;format=rss2" />
 </head>
 
 [% INCLUDE 'bodytag.inc' bodyid='results' bodyclass='scrollto' %]
@@ -27,7 +27,7 @@
             <li><a href="/cgi-bin/koha/opac-main.pl">Home</a> <span class="divider">&rsaquo;</span></li>
             <li>
                 [% IF ( searchdesc ) %]
-                    <a href="#">Results of search [% IF ( query_desc ) %]for '[% query_desc%]'[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s):&nbsp;'[% limit_desc %]'[% END %]</a>
+                    <a href="#">Results of search [% IF ( query_desc ) %]for '[% query_desc | html%]'[% END %][% IF ( limit_desc ) %]&nbsp;with limit(s):&nbsp;'[% limit_desc | html %]'[% END %]</a>
                 [% ELSE %]
                     <a href="#">You did not specify any search criteria</a>
                 [% END %]
@@ -53,7 +53,7 @@
                         [% END %]
                         [% IF ( OPACNoResultsFound ) %]
                             <div id="noresultsfound">
-                                [% OPACNoResultsFound.raw %]
+                                [% OPACNoResultsFound %]
                             </div>
                         [% END %]
                     </div> <!-- / .span12 -->
@@ -77,7 +77,7 @@
 
                 [% IF ( searchdesc ) %]
                     <p id="numresults">
-                    [% IF ( total ) %]<strong>Your search returned [% total %] results.</strong>
+                    [% IF ( total ) %]<strong>Your search returned [% total |html %] results.</strong>
                         [% IF ( related ) %]
                             (related searches:
                                 [% FOREACH relate IN related %]
@@ -85,7 +85,7 @@
                                 [% END %]
                             ).
                         [% END %]
-                        <a href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi | url %][% limit_cgi |html | url %]&amp;count=[% countrss %]&amp;sort_by=acqdate_dsc&amp;format=rss2" class="rsssearchlink noprint"><img src="[% interface %]/[% theme %]/images/feed-icon-16x16.png" alt="Subscribe to this search" title="Subscribe to this search" class="rsssearchicon"/></a>
+                        <a href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi | url %][% limit_cgi |html | url %]&amp;count=[% countrss |html %]&amp;sort_by=acqdate_dsc&amp;format=rss2" class="rsssearchlink noprint"><img src="[% interface %]/[% theme %]/images/feed-icon-16x16.png" alt="Subscribe to this search" title="Subscribe to this search" class="rsssearchicon"/></a>
                     [% END # / IF total %]
                     </p>
                 [% END # / IF searchdesc %]
                             <form action="/cgi-bin/koha/opac-search.pl" method="get" name="bookbag_form" id="bookbag_form" class="checkboxed">
                                 [% IF ( searchdesc ) %]
                                     [% FOREACH QUERY_INPUT IN QUERY_INPUTS %]
-                                        <input type="hidden" name="[% QUERY_INPUT.input_name %]" value="[% QUERY_INPUT.input_value %]"/>
+                                        <input type="hidden" name="[% QUERY_INPUT.input_name |html %]" value="[% QUERY_INPUT.input_value |html %]"/>
                                     [% END %]
                                     [% FOREACH LIMIT_INPUT IN LIMIT_INPUTS %]
-                                        <input type="hidden" name="[% LIMIT_INPUT.input_name %]" value="[% LIMIT_INPUT.input_value %]"/>
+                                        <input type="hidden" name="[% LIMIT_INPUT.input_name |html %]" value="[% LIMIT_INPUT.input_value |html %]"/>
                                     [% END %]
                                 [% END # IF /searchdesc %]
 
                                                         [% IF ( BakerTaylorEnabled && !BakerTaylorBookstoreURL ) %]
                                                             [% bt_id = ( SEARCH_RESULT.normalized_upc || SEARCH_RESULT.normalized_isbn ) %]
                                                             [% IF ( bt_id ) %]
-                                                                <img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL %][% bt_id %]" />
+                                                                <img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL |html %][% bt_id %]" />
                                                             [% ELSE %]
                                                                 <span class="no-image">No cover image available</span>
                                                             [% END %]
                                                     [% IF ( BakerTaylorEnabled && BakerTaylorBookstoreURL ) %]
                                                         [% bt_id = ( SEARCH_RESULT.normalized_upc || SEARCH_RESULT.normalized_isbn ) %]
                                                         [% IF ( bt_id ) %]
-                                                            <a href="https://[% BakerTaylorBookstoreURL %][% bt_id %]">
-                                                                <img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL %][% bt_id %]" />
+                                                            <a href="https://[% BakerTaylorBookstoreURL |html %][% bt_id %]">
+                                                                <img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL |html %][% bt_id %]" />
                                                             </a>
                                                         [% ELSE %]
                                                             <span class="no-image">No cover image available</span>
                                                 [% END %]
 
                                                 [% IF ( OPACXSLTResultsDisplay ) %]
-                                                    [% SEARCH_RESULT.XSLTResultsRecord.raw %]
+                                                    [% SEARCH_RESULT.XSLTResultsRecord %]
                                                 [% ELSE %]
                                                     [% IF ( BiblioDefaultViewmarc ) %]
                                                         <a class="title" href="/cgi-bin/koha/opac-MARCdetail.pl?biblionumber=[% SEARCH_RESULT.biblionumber |url %]" title="View details for this title">
                                                     [% END %]
 
                                                     [% IF ( SEARCH_RESULT.title ) %]
-                                                        [% SEARCH_RESULT.title %]
+                                                        [% SEARCH_RESULT.title |html %]
                                                     [% ELSE %]
                                                         No title
                                                     [% END %]
 
                                                     [% FOREACH subtitl IN SEARCH_RESULT.subtitle %]
-                                                        , [% subtitl.subfield %]
+                                                        , [% subtitl.subfield|html %]
                                                     [% END %]</a>
 
                                                     [% IF ( SEARCH_RESULT.author ) %]
                                                     <span class="results_summary publisher">
                                                         <span class="label">Publication:</span>
                                                             [% IF ( SEARCH_RESULT.place ) %][% SEARCH_RESULT.place %] [% END %]
-                                                            [% IF ( SEARCH_RESULT.publishercode ) %][% SEARCH_RESULT.publishercode %][% END %]
+                                                            [% IF ( SEARCH_RESULT.publishercode ) %][% SEARCH_RESULT.publishercode|html %][% END %]
                                                             [% IF ( SEARCH_RESULT.publicationyear ) %]
                                                                 [% SEARCH_RESULT.publicationyear %]
                                                             [% ELSE %]
                                                                 [% END %]
                                                             [% END %]
                                                             [% IF ( SEARCH_RESULT.pages ) %]. [% SEARCH_RESULT.pages %][% END %]
-                                                            [% IF ( SEARCH_RESULT.notes ) %], [% SEARCH_RESULT.notes %][% END %]
+                                                            [% IF ( SEARCH_RESULT.notes ) %], [% SEARCH_RESULT.notes|html %][% END %]
                                                             [% IF ( SEARCH_RESULT.size ) %] [% SEARCH_RESULT.size %][% END %]
                                                             [% IF ( SEARCH_RESULT.timestamp ) %] <i>(modified on [% SEARCH_RESULT.timestamp %])</i>[% END %]
                                                     </span>
@@ -751,7 +751,7 @@ $(document).ready(function(){
             [% SET number_of_private_shelves = 0 %]
             [% FOREACH s IN add_to_some_private_shelves %]
                 [% IF shelfnumber != s.shelfnumber %]
-                    param1 += "<option id=\"s[% s.shelfnumber %]\" value=\"addtolist\">[% s.shelfname %]<\/option>";
+                    param1 += "<option id=\"s[% s.shelfnumber %]\" value=\"addtolist\">[% s.shelfname |html %]<\/option>";
                     [% SET number_of_private_shelves = number_of_private_shelves + 1 %]
                     [% IF number_of_private_shelves == 10 %][% LAST %][% END %]
                 [% END %]
@@ -763,7 +763,7 @@ $(document).ready(function(){
             [% SET number_of_public_shelves = 0 %]
             [% FOREACH s IN add_to_some_public_shelves %]
                 [% IF shelfnumber != s.shelfnumber %]
-                    param1 += "<option id=\"s[% s.shelfnumber %]\" value=\"addtolist\">[% s.shelfname %]<\/option>";
+                    param1 += "<option id=\"s[% s.shelfnumber %]\" value=\"addtolist\">[% s.shelfname |html %]<\/option>";
                     [% SET number_of_public_shelves = number_of_public_shelves + 1 %]
                     [% IF number_of_public_shelves == 10 %][% LAST %][% END %]
                 [% END %]
@@ -861,8 +861,8 @@ $(document).ready(function(){
 [% END %]
 
 [% IF ( query_desc ) %]
-    var query_desc = "[% query_desc |replace("'", "\'") |replace('\n', '\\n') |replace('\r', '\\r') %]";
-    var querystring = "[% querystring |replace("'", "\'") |replace('\n', '\\n') |replace('\r', '\\r') %]";
+    var query_desc = "[% query_desc |replace("'", "\'") |replace('\n', '\\n') |replace('\r', '\\r') |html %]";
+    var querystring = "[% querystring |replace("'", "\'") |replace('\n', '\\n') |replace('\r', '\\r') |html %]";
     [% IF ( OpacHighlightedWords ) %]
         q_array = query_desc.split(" ");
         // ensure that we don't have "" at the end of the array, which can
index 1e7b767..44792a5 100644 (file)
@@ -1,5 +1,5 @@
 [% INCLUDE 'doc-head-open.inc' %]
-<title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle %][% ELSE %]Koha online[% END %] catalog &rsaquo; Comments on [% title %]</title>
+<title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle %][% ELSE %]Koha online[% END %] catalog &rsaquo; Comments on [% title |html %]</title>
 <style type="text/css">
   #custom-doc { width:37.08em;*width:36.16em;min-width:485px; margin:1em auto; text-align:left; }
 </style>
                             </div>
                         [% END # / ERRORs %]
 
-                        <h1>Comments on <i>[% title %] [% subtitle %]</i></h1>
-                        [% IF ( author ) %]<h3>[% author %]</h3>[% END %]
+                        <h1>Comments on <i>[% title |html %] [% subtitle %]</i></h1>
+                        [% IF ( author ) %]<h3>[% author |html %]</h3>[% END %]
                         <form id="reviewf" action="/cgi-bin/koha/opac-review.pl[% IF ( cgi_debug ) %]?debug=1[% END %]" method="post">
-                            <input type="hidden" name="biblionumber" value="[% biblionumber%]" />
-                            [% IF ( reviewid ) %]<input type="hidden" name="reviewid" value="[% reviewid%]" />[% END %]
+                            <input type="hidden" name="biblionumber" value="[% biblionumber | html%]" />
+                            [% IF ( reviewid ) %]<input type="hidden" name="reviewid" value="[% reviewid | html%]" />[% END %]
                             <fieldset>
                                 <textarea id="review" name="review" cols="60" rows="8">[% review %]</textarea>
                             </fieldset>
index fa04930..d8d6c57 100644 (file)
@@ -68,7 +68,7 @@
                                                     <tr>
                                                         <td><input type="checkbox" name="id" value="[% s.id %]" /></td>
                                                         <td><span title="[% s.time %]">[% s.time |$KohaDates with_hours => 1 %]</span></td>
-                                                        <td><a href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi |html |url %][% limit_cgi |html | url %]&amp;[% s.query_cgi %]&amp;count=[% countrss %]&amp;sort_by=acqdate_dsc&amp;format=rss2" class="rsssearchlink"><img src="[% interface %]/[% theme %]/images/feed-icon-16x16.png" alt="Subscribe to this search" title="Subscribe to this search" class="rsssearchicon"/></a> <a href="/cgi-bin/koha/opac-search.pl?[% s.query_cgi %]">[% s.query_desc %]</a></td>
+                                                        <td><a href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi |html |url %][% limit_cgi |html | url %]&amp;[% s.query_cgi |html %]&amp;count=[% countrss |html %]&amp;sort_by=acqdate_dsc&amp;format=rss2" class="rsssearchlink"><img src="[% interface %]/[% theme %]/images/feed-icon-16x16.png" alt="Subscribe to this search" title="Subscribe to this search" class="rsssearchicon"/></a> <a href="/cgi-bin/koha/opac-search.pl?[% s.query_cgi |html %]">[% s.query_desc |html %]</a></td>
                                                         <td>[% s.total %]</td>
                                                     </tr>
                                                 [% END %]
                                                 <tr>
                                                     <td><input type="checkbox" name="id" value="[% s.id %]" /></td>
                                                     <td><span title="[% s.time %]">[% s.time |$KohaDates with_hours => 1 %]</span></td>
-                                                    <td><a href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi |html |url %][% limit_cgi |html | url %]&amp;[% s.query_cgi %]&amp;count=[% countrss %]&amp;sort_by=acqdate_dsc&amp;format=rss2" class="rsssearchlink"><img src="[% interface %]/[% theme %]/images/feed-icon-16x16.png" alt="Subscribe to this search" title="Subscribe to this search" class="rsssearchicon"/></a> <a href="/cgi-bin/koha/opac-search.pl?[% s.query_cgi %]">[% s.query_desc %]</a></td>
+                                                    <td><a href="[% OPACBaseURL %]/cgi-bin/koha/opac-search.pl?[% query_cgi |html |url %][% limit_cgi |html | url %]&amp;[% s.query_cgi |html %]&amp;count=[% countrss |html %]&amp;sort_by=acqdate_dsc&amp;format=rss2" class="rsssearchlink"><img src="[% interface %]/[% theme %]/images/feed-icon-16x16.png" alt="Subscribe to this search" title="Subscribe to this search" class="rsssearchicon"/></a> <a href="/cgi-bin/koha/opac-search.pl?[% s.query_cgi |html %]">[% s.query_desc |html %]</a></td>
                                                     <td>[% s.total %]</td>
                                                 </tr>
                                             [% END %]
                                                     <tr>
                                                         <td><input type="checkbox" name="id" value="[% s.id %]" /></td>
                                                         <td><span title="[% s.time %]">[% s.time |$KohaDates with_hours => 1 %]</span></td>
-                                                        <td><a href="/cgi-bin/koha/opac-authorities-home.pl?[% s.query_cgi %]">[% s.query_desc %]</a></td>
+                                                        <td><a href="/cgi-bin/koha/opac-authorities-home.pl?[% s.query_cgi |html %]">[% s.query_desc |html %]</a></td>
                                                         <td>[% s.total %]</td>
                                                     </tr>
                                                 [% END %]
                                                     <tr>
                                                         <td><input type="checkbox" name="id" value="[% s.id %]" /></td>
                                                         <td><span title="[% s.time %]">[% s.time |$KohaDates with_hours => 1 %]</span></td>
-                                                        <td><a href="/cgi-bin/koha/opac-authorities-home.pl?[% s.query_cgi %]">[% s.query_desc %]</a></td>
+                                                        <td><a href="/cgi-bin/koha/opac-authorities-home.pl?[% s.query_cgi |html %]">[% s.query_desc |html %]</a></td>
                                                         <td>[% s.total %]</td>
                                                     </tr>
                                                 [% END %]
index ec62192..e3c88ab 100644 (file)
@@ -9,7 +9,7 @@ Your cart
 [% FILTER html2text %]
     <p>Hi,</p>
 
-    <p>[% firstname.raw %] [% surname.raw %] sent you a cart from our online catalog.</p>
+    <p>[% firstname %] [% surname %] sent you a cart from our online catalog.</p>
 
     <p>Please note that the attached file is a MARC bibliographic records file
     which can be imported into personal bibliographic software like EndNote,
@@ -22,26 +22,26 @@ Your cart
 [% FILTER html2text %]
 
     [% IF comment %]
-        <p>[% comment.raw %]</p>
+        <p>[% comment %]</p>
         <hr/>
     [% END %]
     <ol>
     [% FOREACH BIBLIO_RESULT IN BIBLIO_RESULTS %]
         <li>
             <span>
-                [% BIBLIO_RESULT.title.raw %]
-                [% IF ( BIBLIO_RESULT.subtitle ) %] [% BIBLIO_RESULT.subtitle.raw %][% END %]
+                [% BIBLIO_RESULT.title %]
+                [% IF ( BIBLIO_RESULT.subtitle ) %] [% BIBLIO_RESULT.subtitle %][% END %]
             </span>
 
             <p>
             [% IF ( BIBLIO_RESULT.HASAUTHORS ) %]
-            <span>Author(s): [% IF ( BIBLIO_RESULT.author ) %][% BIBLIO_RESULT.author.raw %][% END %]
+            <span>Author(s): [% IF ( BIBLIO_RESULT.author ) %][% BIBLIO_RESULT.author %][% END %]
 
             [% IF ( BIBLIO_RESULT.MARCAUTHORS ) %]
-                [% IF ( BIBLIO_RESULT.author.raw ) %]; [% END %]
+                [% IF ( BIBLIO_RESULT.author ) %]; [% END %]
                 [% FOREACH MARCAUTHOR IN BIBLIO_RESULT.MARCAUTHORS %]
                     [% FOREACH MARCAUTHOR_SUBFIELDS_LOO IN MARCAUTHOR.MARCAUTHOR_SUBFIELDS_LOOP %]
-                        [% MARCAUTHOR_SUBFIELDS_LOO.separator.raw %][% MARCAUTHOR_SUBFIELDS_LOO.value.raw %]
+                        [% MARCAUTHOR_SUBFIELDS_LOO.separator %][% MARCAUTHOR_SUBFIELDS_LOO.value %]
                     [% END %]
                     [% UNLESS ( loop.last ) %];[% END %]
                 [% END %]
@@ -51,76 +51,76 @@ Your cart
 
             [% IF ( BIBLIO_RESULT.ISBN ) %]
             <span>
-                ISBN: [% BIBLIO_RESULT.ISBN.raw %]
+                ISBN: [% BIBLIO_RESULT.ISBN %]
             </span><br/>
             [% END %]
 
             [% IF BIBLIO_RESULT.publishercode %]
             <span>
-                Published by: [% BIBLIO_RESULT.publishercode.raw %]
+                Published by: [% BIBLIO_RESULT.publishercode %]
                 [% IF ( BIBLIO_RESULT.publicationyear ) %]
-                    in [% BIBLIO_RESULT.publicationyear.raw %]
+                    in [% BIBLIO_RESULT.publicationyear %]
                 [% END %]
                 [% IF ( BIBLIO_RESULT.pages ) %]
-                    , [% BIBLIO_RESULT.pages.raw %]
+                    , [% BIBLIO_RESULT.pages %]
                 [% END %]
                 [% IF BIBLIO_RESULT.item('size') %]
-                , [% BIBLIO_RESULT.item('size').raw %]
+                , [% BIBLIO_RESULT.item('size') %]
                 [% END %]
             </span><br/>
             [% END %]
 
             [% IF BIBLIO_RESULT.collection %]
             <span>
-                Collection: [% BIBLIO_RESULT.seriestitle.raw %]
+                Collection: [% BIBLIO_RESULT.seriestitle %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.subject ) %]
             <span>
-                Subject: [% BIBLIO_RESULT.subject.raw %]
+                Subject: [% BIBLIO_RESULT.subject %]
             <span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.copyrightdate ) %]
             <span>
-                Copyright year: [% BIBLIO_RESULT.copyrightdate.raw %]
+                Copyright year: [% BIBLIO_RESULT.copyrightdate %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.notes ) %]
             <span>
-                Notes : [% BIBLIO_RESULT.notes.raw %]
+                Notes : [% BIBLIO_RESULT.notes %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.unititle ) %]
             <span>
-                Unified title: [% BIBLIO_RESULT.unititle.raw %]
+                Unified title: [% BIBLIO_RESULT.unititle %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.serial ) %]
             <span>
-                Serial: [% BIBLIO_RESULT.serial.raw %]
+                Serial: [% BIBLIO_RESULT.serial %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.dewey ) %]
             <span>
-                Dewey: [% BIBLIO_RESULT.dewey.raw %]
+                Dewey: [% BIBLIO_RESULT.dewey %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.classification ) %]
             <span>
-                Classification: [% BIBLIO_RESULT.classification.raw %]
+                Classification: [% BIBLIO_RESULT.classification %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.lccn ) %]
             <span>
-                LCCN: [% BIBLIO_RESULT.lccn.raw %]
+                LCCN: [% BIBLIO_RESULT.lccn %]
             </span><br/>
             [% END %]
             [% IF ( BIBLIO_RESULT.url ) %]
@@ -132,17 +132,17 @@ Your cart
 
             [% IF ( OPACBaseURL ) %]
             <p>
-                In online catalog: [% OPACBaseURL.raw %]/cgi-bin/koha/opac-detail.pl?biblionumber=[% BIBLIO_RESULT.biblionumber %]
+                In online catalog: [% OPACBaseURL %]/cgi-bin/koha/opac-detail.pl?biblionumber=[% BIBLIO_RESULT.biblionumber %]
             </p>
             [% END %]
             [% IF ( BIBLIO_RESULT.ITEM_RESULTS.size ) %]
             <p>Items:
             <ul>
                 [% FOREACH ITEM_RESULT IN BIBLIO_RESULT.ITEM_RESULTS %]<li>
-                    [% ITEM_RESULT.branchname.raw %]
-                    [% ITEM_RESULT.location.raw %]
-                    [% IF ITEM_RESULT.itemcallnumber %]([% ITEM_RESULT.itemcallnumber.raw %])[% END %]
-                    [% ITEM_RESULT.barcode.raw %]
+                    [% ITEM_RESULT.branchname %]
+                    [% ITEM_RESULT.location %]
+                    [% IF ITEM_RESULT.itemcallnumber %]([% ITEM_RESULT.itemcallnumber %])[% END %]
+                    [% ITEM_RESULT.barcode %]
                 </li>[% END %]
             </ul>
             </p>
index 62a4306..4c7f5d4 100644 (file)
@@ -1,5 +1,5 @@
 <SUBJECT>
-Your list : [% shelfname.raw %]
+Your list : [% shelfname %]
 <END_SUBJECT>
 
 [% USE HtmlToText %]
@@ -8,8 +8,8 @@ Your list : [% shelfname.raw %]
 [% FILTER html2text %]
     <p>Hi,</p>
 
-    <p>[% firstname.raw %] [% surname.raw %] sent you from our online catalog, the
-    virtual shelf called : [% shelfname.raw %].</p>
+    <p>[% firstname %] [% surname %] sent you from our online catalog, the
+    virtual shelf called : [% shelfname %].</p>
 
     <p>Please note that the attached file is a MARC bibliographic records file
     which can be imported into personal bibliographic software like EndNote,
@@ -23,30 +23,30 @@ Your list : [% shelfname.raw %]
 [% FILTER html2text %]
 
     [% IF comment %]
-        <p>[% comment.raw %]</p>
+        <p>[% comment %]</p>
         <hr/>
     [% END %]
     <ol>
     [% FOREACH BIBLIO_RESULT IN BIBLIO_RESULTS %]
         <li>
             <span>
-                [% BIBLIO_RESULT.title.raw %]
+                [% BIBLIO_RESULT.title %]
                 [% IF ( BIBLIO_RESULT.subtitle.size ) %]
                   [% FOREACH subtitle IN BIBLIO_RESULT.subtitle %]
-                    [% subtitle.subfield.raw %]
+                    [% subtitle.subfield %]
                   [% END %]
                 [% END %]
             </span>
 
             <p>
             [% IF ( BIBLIO_RESULT.HASAUTHORS ) %]
-            <span>Author(s): [% IF ( BIBLIO_RESULT.author ) %][% BIBLIO_RESULT.author.raw %][% END %]
+            <span>Author(s): [% IF ( BIBLIO_RESULT.author ) %][% BIBLIO_RESULT.author %][% END %]
 
             [% IF ( BIBLIO_RESULT.MARCAUTHORS ) %]
                 [% IF ( BIBLIO_RESULT.author ) %]; [% END %]
                 [% FOREACH MARCAUTHOR IN BIBLIO_RESULT.MARCAUTHORS %]
                     [% FOREACH MARCAUTHOR_SUBFIELDS_LOO IN MARCAUTHOR.MARCAUTHOR_SUBFIELDS_LOOP %]
-                        [% MARCAUTHOR_SUBFIELDS_LOO.separator.raw %][% MARCAUTHOR_SUBFIELDS_LOO.value.raw %]
+                        [% MARCAUTHOR_SUBFIELDS_LOO.separator %][% MARCAUTHOR_SUBFIELDS_LOO.value %]
                     [% END %]
                     [% UNLESS ( loop.last ) %];[% END %]
                 [% END %]
@@ -57,7 +57,7 @@ Your list : [% shelfname.raw %]
             [% IF ( BIBLIO_RESULT.ISBN ) %]
             <span>
                 ISBN: [% FOREACH isbn IN BIBLIO_RESULT.ISBN %]
-                          [% isbn.raw %]
+                          [% isbn %]
                           [% UNLESS ( loop.last ) %]; [% END %]
                       [% END %]
             </span><br/>
@@ -65,12 +65,12 @@ Your list : [% shelfname.raw %]
 
             [% IF BIBLIO_RESULT.publishercode %]
             <span>
-                Published by: [% BIBLIO_RESULT.publishercode.raw %]
+                Published by: [% BIBLIO_RESULT.publishercode %]
                 [% IF ( BIBLIO_RESULT.publicationyear ) %]
-                    in [% BIBLIO_RESULT.publicationyear.raw %]
+                    in [% BIBLIO_RESULT.publicationyear %]
                 [% END %]
                 [% IF ( BIBLIO_RESULT.pages ) %]
-                    , [% BIBLIO_RESULT.pages.raw %]
+                    , [% BIBLIO_RESULT.pages %]
                 [% END %]
                 [% IF BIBLIO_RESULT.item('size') %]
                 , [% BIBLIO_RESULT.item('size') %]
@@ -80,55 +80,55 @@ Your list : [% shelfname.raw %]
 
             [% IF BIBLIO_RESULT.collection %]
             <span>
-                Collection: [% BIBLIO_RESULT.seriestitle.raw %]
+                Collection: [% BIBLIO_RESULT.seriestitle %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.subject ) %]
             <span>
-                Subject: [% BIBLIO_RESULT.subject.raw %]
+                Subject: [% BIBLIO_RESULT.subject %]
             <span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.copyrightdate ) %]
             <span>
-                Copyright year: [% BIBLIO_RESULT.copyrightdate.raw %]
+                Copyright year: [% BIBLIO_RESULT.copyrightdate %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.notes ) %]
             <span>
-                Notes : [% BIBLIO_RESULT.notes.raw %]
+                Notes : [% BIBLIO_RESULT.notes %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.unititle ) %]
             <span>
-                Unified title: [% BIBLIO_RESULT.unititle.raw %]
+                Unified title: [% BIBLIO_RESULT.unititle %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.serial ) %]
             <span>
-                Serial: [% BIBLIO_RESULT.serial.raw %]
+                Serial: [% BIBLIO_RESULT.serial %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.dewey ) %]
             <span>
-                Dewey: [% BIBLIO_RESULT.dewey.raw %]
+                Dewey: [% BIBLIO_RESULT.dewey %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.classification ) %]
             <span>
-                Classification: [% BIBLIO_RESULT.classification.raw %]
+                Classification: [% BIBLIO_RESULT.classification %]
             </span><br/>
             [% END %]
 
             [% IF ( BIBLIO_RESULT.lccn ) %]
             <span>
-                LCCN: [% BIBLIO_RESULT.lccn.raw %]
+                LCCN: [% BIBLIO_RESULT.lccn %]
             </span><br/>
             [% END %]
             [% IF ( BIBLIO_RESULT.url ) %]
@@ -140,17 +140,17 @@ Your list : [% shelfname.raw %]
 
             [% IF ( OPACBaseURL ) %]
             <p>
-                In online catalog: [% OPACBaseURL.raw %]/cgi-bin/koha/opac-detail.pl?biblionumber=[% BIBLIO_RESULT.biblionumber %]
+                In online catalog: [% OPACBaseURL %]/cgi-bin/koha/opac-detail.pl?biblionumber=[% BIBLIO_RESULT.biblionumber %]
             </p>
             [% END %]
             [% IF ( BIBLIO_RESULT.ITEM_RESULTS.size ) %]
             <p>Items:
             <ul>
                 [% FOREACH ITEM_RESULT IN BIBLIO_RESULT.ITEM_RESULTS %]<li>
-                    [% ITEM_RESULT.branchname.raw %]
-                    [% ITEM_RESULT.location.raw %]
-                    [% IF ITEM_RESULT.itemcallnumber %]([% ITEM_RESULT.itemcallnumber.raw %])[% END %]
-                    [% ITEM_RESULT.barcode.raw %]
+                    [% ITEM_RESULT.branchname %]
+                    [% ITEM_RESULT.location %]
+                    [% IF ITEM_RESULT.itemcallnumber %]([% ITEM_RESULT.itemcallnumber %])[% END %]
+                    [% ITEM_RESULT.barcode %]
                 </li>[% END %]
             </ul>
             </p>
index a702b74..4517ffc 100644 (file)
                         <h2>Issues for a subscription</h2>
                         <div id="views">
                             <span class="view">
-                                <a id="Normalview" href="opac-detail.pl?biblionumber=[% biblionumber %]" class="button">Normal view</a>
+                                <a id="Normalview" href="opac-detail.pl?biblionumber=[% biblionumber | html %]" class="button">Normal view</a>
                             </span>
                             <span class="view"><span id="Briefhistory">Brief history</span></span>
-                            <span class="view"><a id="Fullhistory" href="opac-serial-issues.pl?selectview=full&amp;biblionumber=[% biblionumber%]" class="button">Full history</a></span>
+                            <span class="view"><a id="Fullhistory" href="opac-serial-issues.pl?selectview=full&amp;biblionumber=[% biblionumber | html%]" class="button">Full history</a></span>
                         </div>
                         <form method="post" name="f">
                             [% FOREACH subscription_LOO IN subscription_LOOP %]
index 6a46354..2525d80 100644 (file)
@@ -5,14 +5,14 @@
 <channel>
  <title>[% shelf.shelfname %]</title>
  <link>[% OPACBaseURL %]/cgi-bin/koha/opac-shelves.pl?rss=1&amp;viewshelf=[% shelf.shelfnumber %]</link>
- <description>RSS feed for public list [% shelf.shelfname %]</description>
+ <description>RSS feed for public list [% shelf.shelfname | html %]</description>
 
 [% FOREACH i IN itemsloop %]
  <item>
   <title>
-    [% i.title %]
+    [% i.title | html %]
     [% IF i.author %]
-        by [% i.author %]
+        by [% i.author | html %]
     [% END %]
   </title>
   <link>[% OPACBaseURL %]/cgi-bin/koha/opac-detail.pl?biblionumber=[% i.biblionumber %]</link>
index 63d848e..d13c721 100644 (file)
@@ -5,7 +5,7 @@
 [% SET TagsInputEnabled = ( ( Koha.Preference( 'opacuserlogin' ) == 1 ) && ( Koha.Preference( 'TagsEnabled' ) == 1 ) && Koha.Preference('TagsInputOnList') ) %]
 
 [% INCLUDE 'doc-head-open.inc' %]
-<title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle %][% ELSE %]Koha online[% END %] catalog &rsaquo;   [% IF op == 'view' %]Contents of [% shelf.shelfname %][% ELSE %]Your lists[% END %]</title>[% INCLUDE 'doc-head-close.inc' %]
+<title>[% IF ( LibraryNameTitle ) %][% LibraryNameTitle %][% ELSE %]Koha online[% END %] catalog &rsaquo;   [% IF op == 'view' %]Contents of [% shelf.shelfname |html %][% ELSE %]Your lists[% END %]</title>[% INCLUDE 'doc-head-close.inc' %]
 [% BLOCK cssinclude %][% END %]
 </head>
 [% IF ( loggedinusername ) %][% INCLUDE 'bodytag.inc' bodyid='opac-userlists' bodyclass='scrollto' %][% ELSE %][% INCLUDE 'bodytag.inc' bodyid='opac-lists' bodyclass='scrollto' %][% END %]
@@ -66,7 +66,7 @@
         [% END %]
 
         [% IF op == 'view' %]
-            <li><span class="divider">&rsaquo;</span> Contents of <i>[% shelf.shelfname %]</i></li>
+            <li><span class="divider">&rsaquo;</span> Contents of <i>[% shelf.shelfname | html %]</i></li>
         [% END %]
 
         [% IF op == 'add_form' %]
@@ -74,7 +74,7 @@
         [% END %]
 
         [% IF op == 'edit_form' %]
-            <li><span class="divider">&rsaquo;</span> Edit list <i>[% shelf.shelfname %]</i></li>
+            <li><span class="divider">&rsaquo;</span> Edit list <i>[% shelf.shelfname | html %]</i></li>
         [% END %]
 
     </ul> <!-- / .breadcrumb -->
 
                     [% IF op == 'view' %]
                         <h3>
-                            [% shelf.shelfname %]
+                            [% shelf.shelfname |html %]
                             <a href="[% OPACBaseURL %]/cgi-bin/koha/opac-shelves.pl?rss=1&amp;op=view&amp;shelfnumber=[% shelf.shelfnumber %]" class="rss-list-link noprint">
                                 <img src="[% interface %]/[% theme %]/images/feed-icon-16x16.png" alt="Subscribe to this list" title="Subscribe to this list" border="0" class="rsssearchicon"/>
                             </a>
                         </h3>
 
-                         [% IF ( itemsloop ) %]
-                             <div id="toolbar" class="toolbar clearfix">
-                                 <div class="list-actions">
+                        [% IF ( itemsloop ) %]
+                            <div id="toolbar" class="toolbar clearfix">
+                                <div class="list-actions">
                                     <a class="newshelf" href="/cgi-bin/koha/opac-shelves.pl?op=add_form">New list</a> <span class="sep">|</span>
-                                    <a href="/cgi-bin/koha/opac-downloadshelf.pl?shelfnumber=[% shelf.shelfnumber %]" class="download" data-toggle="modal" data-target="#modalWin">Download list</a>
+                                    <a href="/cgi-bin/koha/opac-downloadshelf.pl?shelfnumber=[% shelf.shelfnumber | html %]" class="download" data-toggle="modal" data-target="#modalWin">Download list</a>
 
                                     [% IF Koha.Preference( 'opacuserlogin' ) == 1 %]
-                                        <span class="sendlist"><a href="/cgi-bin/koha/opac-sendshelf.pl?shelfid=[% shelf.shelfnumber %]" class="send" onclick="open('/cgi-bin/koha/opac-sendshelf.pl?shelfid=[% shelf.shelfnumber %]','win_form','scrollbars=no,resizable=no,height=300,width=450,top=50,left=100'); return false; ">Send list</a></span>
+                                        <span class="sendlist"><a href="/cgi-bin/koha/opac-sendshelf.pl?shelfid=[% shelf.shelfnumber | html %]" class="send" onclick="open('/cgi-bin/koha/opac-sendshelf.pl?shelfid=[% shelf.shelfnumber | html %]','win_form','scrollbars=no,resizable=no,height=300,width=450,top=50,left=100'); return false; ">Send list</a></span>
                                     [% END %]
 
                                     <a class="print-small" target="_blank" href="/cgi-bin/koha/opac-shelves.pl?op=view&amp;shelfnumber=[% shelf.shelfnumber %]&sortfield=[% sortfield %]&direction=[% direction |uri %]&print=1">Print list</a>
                                             <input type="hidden" name="op" value="edit_form" />
                                             <input type="hidden" name="referer" value="view" />
                                             <input type='hidden' name='category' value='[% category %]' />
-                                            <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber %]" />
+                                            <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
                                             <input type="submit" class="editshelf" value="Edit list" />
                                         </form>
 
                                             <input type="hidden" name="op" value="delete" />
                                             <input type="hidden" name="referer" value="list" />
                                             <input type='hidden' name='category' value='[% category %]' />
-                                            <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber %]" />
+                                            <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
                                             <input type="submit" class="deleteshelf" value="Delete list" onclick="return confirmDelete(MSG_CONFIRM_DELETE_LIST);"/>
                                         </form>
                                         [% IF category == PRIVATE && Koha.Preference('OpacAllowSharingPrivateLists') %]
-                                            <a href="/cgi-bin/koha/opac-shareshelf.pl?op=invite&shelfnumber=[% shelf.shelfnumber %]" class="">Share list</a>
+                                            <a href="/cgi-bin/koha/opac-shareshelf.pl?op=invite&shelfnumber=[% shelf.shelfnumber | html %]" class="">Share list</a>
                                         [% END %]
                                     [% ELSIF category == PRIVATE # not manageshelf and private means shared %]
                                         <form action="/cgi-bin/koha/opac-shelves.pl" method="post" class="form-inline">
                                             <input type="hidden" name="op" value="remove_share" />
                                             <input type="hidden" name="referer" value="list" />
                                             <input type='hidden' name='category' value='[% category %]' />
-                                            <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber %]" />
+                                            <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
                                             <input type="submit" class="deleteshelf" onclick="return confirmDelete(MSG_CONFIRM_REMOVE_SHARE);" value="Remove share" />
                                         </form>
                                     [% END %]
 
                                 <form action="/cgi-bin/koha/opac-shelves.pl" id="sorting-form" class="form-inline sort_by pull-right">
                                     <input type="hidden" name="op" value="view" />
-                                    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber %]" />
+                                    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
 
                                     <label for="sortfield">Sort by: </label>
                                     <select name="sortfield" id="sortfield" class="resort" onchange="$('#sorting-form').submit()">
                             <form action="/cgi-bin/koha/opac-shelves.pl" method="post" id="myform" name="myform" class="checkboxed">
                                 [% IF can_manage_shelf %]
                                     <input type="hidden" name="op" value="remove_biblios" />
-                                    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber %]" />
+                                    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
                                 [% END %]
                                 <div class="searchresults">
                                     <table id="listcontents" class="table">
                                                         [% IF ( BakerTaylorEnabled ) %]
                                                             [% bt_id = ( itemsloo.normalized_upc || itemsloo.normalized_isbn ) %]
                                                             [% IF ( bt_id ) %]
-                                                                <a href="https://[% BakerTaylorBookstoreURL %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL %][% bt_id %]" /></a>
+                                                                <a href="https://[% BakerTaylorBookstoreURL |html %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL |html %][% bt_id %]" /></a>
                                                             [% ELSE %]
                                                                 <span class="no-image">No cover image available</span>
                                                             [% END %]
                                                         [% END %]
                                                     </div>
                                                     [% IF ( itemsloo.XSLTBloc ) %]
-                                                        [% itemsloo.XSLTBloc.raw %]
+                                                        [% itemsloo.XSLTBloc %]
                                                     [% ELSE %]
 
                                                         [% IF ( itemsloo.BiblioDefaultViewmarc ) %]
                                                         [% END %]
 
                                                         [% IF ( itemsloo.title ) %]
-                                                            [% itemsloo.title %]
+                                                            [% itemsloo.title |html %]
                                                         [% ELSE %]
                                                             No title
                                                         [% END %]
 
                                                         [% FOREACH subtitl IN itemsloo.subtitle %]
-                                                            [% subtitl.subfield %]
+                                                            [% subtitl.subfield|html %]
                                                         [% END %]
                                                         </a>
 
                                                                 [% itemsloo.place %]
                                                             [% END %]
                                                             [% IF ( itemsloo.publishercode ) %]
-                                                                [% itemsloo.publishercode %]
+                                                                [% itemsloo.publishercode|html %]
                                                             [% END %]
                                                             [% IF ( itemsloo.publicationyear ) %]
                                                                 [% itemsloo.publicationyear %]
                                                                 [% END %]
                                                             [% END %]
                                                             [% IF ( itemsloo.pages ) %]. [% itemsloo.pages %][% END %]
-                                                            [% IF ( itemsloo.notes ) %], [% itemsloo.notes %][% END %]
+                                                            [% IF ( itemsloo.notes ) %], [% itemsloo.notes|html %][% END %]
                                                             [% IF ( itemsloo.item('size') ) %] [% itemsloo.item('size') %][% END %]
                                                         </span>
                                                         <span class="results_summary">
                                 </div><!-- / .searchresults -->
 
                             [% IF ( pagination_bar ) %]
-                                <div class="pages">[% pagination_bar.raw %]</div>
+                                <div class="pages">[% pagination_bar %]</div>
                             [% END %]
 
                         [% ELSE %]
                                         <form method="get" action="/cgi-bin/koha/opac-shelves.pl" class="form-inline">
                                             <input type="hidden" name="op" value="edit_form" />
                                             <input type="hidden" name="category" value="category" />
-                                            <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber %]" />
+                                            <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
                                             <input type="submit" class="editshelf" value="Edit list" />
                                         </form>
 
                                         <form method="post" action="/cgi-bin/koha/opac-shelves.pl" class="form-inline">
                                             <input type="hidden" name="op" value="delete" />
-                                            <input type="hidden" name="shelfnumber" value="[% shelfnumber %]"/>
+                                            <input type="hidden" name="shelfnumber" value="[% shelfnumber | html  %]"/>
                                             <input type="hidden" name="category" value="category" />
                                             <input type="submit" class="deleteshelf" value="Delete list" onclick="return confirmDelete(MSG_CONFIRM_DELETE_LIST);"/>
                                         </form>
                                 [% END %]
                             </div>
                         [% END # / IF itemsloop %]
-                      [% END %]
+                    [% END %]
+
                     [% IF itemsloop && can_remove_biblios %]
                         <input type="hidden" name="op" value="remove_biblios" />
-                        <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber %]" />
+                        <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
                         <input type="hidden" name="modifyshelfcontents" value="1" />
                         <input type="submit" value="Remove selected items" id="remove-selected" class="btn btn-danger"/>
                         </form>
                         <form method="post" action="opac-shelves.pl">
                         <input type="hidden" name="op" value="delete" />
                         <input type="hidden" name="referer" value="list" />
-                        <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber %]"/>
+                        <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html  %]"/>
                         <input type="submit" class="btn btn-danger" value="Delete this list" onclick="return confirmDelete(MSG_CONFIRM_DELETE_LIST)" />
                         </form>
                     [% END %]
                                     <legend>Create a new list</legend>
                                     <input type="hidden" name="op" value="add" />
                                 [% ELSE %]
-                                    <legend>Editing <em>[% shelf.shelfname %]</em></legend>
+                                    <legend>Editing <em>[% shelf.shelfname |html %]</em></legend>
                                     <input type="hidden" name="op" value="edit" />
                                     <input type="hidden" name="referer" value="[% referer %]" />
-                                    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber %]" />
+                                    <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber | html %]" />
                                 [% END %]
                                 <input type="hidden" name="owner" id="owner" value="[% loggedinusernumber %]" />
                                 <ol>
                                     <li>
                                         <label class="required" for="shelfname">List name: </label>
-                                        <input type="text" id="shelfname" name="shelfname" maxlength="255" value="[% shelf.shelfname %]" /></li>
+                                        <input type="text" id="shelfname" name="shelfname" maxlength="255" value="[% shelf.shelfname |html %]" /></li>
                                     <li>
                                         <label for="sortfield" >Sort this list by: </label>
                                         <select name="sortfield" id="sortfield">
                                         [% FOREACH s IN shelves %]
                                             [% SET contents = s.get_contents %]
                                             <tr>
-                                                <td><a href="/cgi-bin/koha/opac-shelves.pl?op=view&amp;shelfnumber=[% s.shelfnumber %]">[% s.shelfname %]</a></td>
+                                                <td><a href="/cgi-bin/koha/opac-shelves.pl?op=view&amp;shelfnumber=[% s.shelfnumber %]">[% s.shelfname |html %]</a></td>
                                                 <td>[% IF contents.count %][% contents.count %] [% IF contents.count == 1 %]item[% ELSE %]items[% END %][% ELSE %]Empty[% END %]</td>
                                                 <td>
                                                     [% IF s.category == PRIVATE %]
                                                 <td>
                                                     [% IF s.can_be_managed( loggedinusernumber ) %]
                                                         <form action="/cgi-bin/koha/opac-shelves.pl" method="get" class="form-inline">
-                                                            <input type="hidden" name="shelfnumber" value="[% s.shelfnumber %]" />
+                                                            <input type="hidden" name="shelfnumber" value="[% s.shelfnumber |html %]" />
                                                             <input type="hidden" name="category" value="[% s.category %]" />
                                                             <input type="hidden" name="op" value="edit_form" />
                                                             <input type="hidden" name="referer" value="list" />
                                                             <input type="hidden" name="op" value="delete" />
                                                             <input type="hidden" name="referer" value="list" />
                                                             <input type='hidden' name='category' value='[% category %]' />
-                                                            <input type="hidden" name="shelfnumber" value="[% s.shelfnumber %]" />
+                                                            <input type="hidden" name="shelfnumber" value="[% s.shelfnumber | html %]" />
                                                             <input type="submit" class="deleteshelf" onclick="return confirmDelete(MSG_CONFIRM_DELETE_LIST);" value="Delete" />
                                                         </form>
                                                     [% END %]
                                                     [% IF s.category == PRIVATE AND s.can_be_managed( loggedinusernumber ) AND Koha.Preference('OpacAllowSharingPrivateLists') %]
-                                                        <a href="/cgi-bin/koha/opac-shareshelf.pl?op=invite&shelfnumber=[% s.shelfnumber %]" class="">Share</a>
+                                                        <a href="/cgi-bin/koha/opac-shareshelf.pl?op=invite&shelfnumber=[% s.shelfnumber |html %]" class="">Share</a>
                                                     [% END %]
                                                     [% IF s.is_shared_with( loggedinusernumber ) %]
                                                         <form action="opac-shelves.pl" method="post" class="form-inline">
                                                             <input type="hidden" name="op" value="remove_share" />
                                                             <input type="hidden" name="referer" value="list" />
                                                             <input type='hidden' name='category' value='[% category %]' />
-                                                            <input type="hidden" name="shelfnumber" value="[% s.shelfnumber %]" />
+                                                            <input type="hidden" name="shelfnumber" value="[% s.shelfnumber | html %]" />
                                                             <input type="submit" class="deleteshelf" onclick="return confirmDelete(MSG_CONFIRM_REMOVE_SHARE);" value="Remove share" />
                                                         </form>
                                                     [% END %]&nbsp;
index 528bf5a..fddf531 100644 (file)
@@ -8,7 +8,7 @@
      <lastBuildDate>[% timestamp %]</lastBuildDate>
         [% FOREACH review IN reviews %]
      <item>
-       <title>New comment on [% review.title %] [% FOREACH subtitl IN review.subtitle %], [% subtitl.subfield %][% END %]</title>
+       <title>New comment on [% review.title |html %] [% FOREACH subtitl IN review.subtitle %], [% subtitl.subfield |html %][% END %]</title>
        <link>[% OPACBaseURL %]/cgi-bin/koha/opac-detail.pl?biblionumber=[% review.biblionumber %]#comments</link>
        <description><![CDATA[
 [% IF ( OPACAmazonCoverImages ) %][% IF ( review.normalized_isbn ) %]<img src="https://images-na.ssl-images-amazon.com/images/P/[% review.normalized_isbn %].01.TZZZZZZZ.jpg" alt="" />[% END %][% END %]
 [% END %][% END %][% END %][% END %]
 
 [% bt_id = ( review.normalized_upc || review.normalized_isbn ) %]
-[% IF ( BakerTaylorEnabled && bt_id ) %]<a href="https://[% BakerTaylorBookstoreURL %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL %][% bt_id %]" /></a>[% END %]
-        [% IF ( review.author ) %]<p>By [% review.author %].</p> [% END %]
-        <p>[% IF ( review.place ) %][% review.place %] [% END %][% IF ( review.publishercode ) %][% review.publishercode %][% END %][% IF ( review.publicationyear ) %] [% review.publicationyear %]
-                    [% ELSE %][% IF ( review.copyrightdate ) %] [% review.copyrightdate %][% END %][% END %]
-                        [% IF ( review.pages ) %]. [% review.pages %][% END %]
-                        [% IF ( review.notes ) %], [% review.notes %][% END %]
-                        [% IF ( review.size ) %] [% review.size %]. [% END %]
-                        [% IF ( review.isbn ) %] [% review.isbn %][% END %] </p>
-<p>[% IF ( review.borrowernumber && ShowReviewer ) %][% review.firstname %] [% review.surname %] commented[% ELSE %]Comment[% END %] on [% review.datereviewed | $KohaDates %]: [% review.review %]</p>
+[% IF ( BakerTaylorEnabled && bt_id ) %]<a href="https://[% BakerTaylorBookstoreURL |html %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL |html %][% bt_id %]" /></a>[% END %]
+          [% IF ( review.author ) %]<p>By [% review.author |html %].</p> [% END %]
+          <p>[% IF ( review.place ) %][% review.place |html %] [% END %][% IF ( review.publishercode ) %][% review.publishercode |html %][% END %][% IF ( review.publicationyear ) %] [% review.publicationyear |html %]
+                    [% ELSE %][% IF ( review.copyrightdate ) %] [% review.copyrightdate |html %][% END %][% END %]
+                        [% IF ( review.pages ) %]. [% review.pages |html %][% END %]
+                        [% IF ( review.notes ) %], [% review.notes |html %][% END %]
+                        [% IF ( review.size ) %] [% review.size |html %]. [% END %]
+                        [% IF ( review.isbn ) %] [% review.isbn |html %][% END %] </p>
+<p>[% IF ( review.borrowernumber && ShowReviewer ) %][% review.firstname %] [% review.surname %] commented[% ELSE %]Comment[% END %] on [% review.datereviewed | $KohaDates %]: [% review.review |html %]</p>
                                                ]]></description>
        <guid>[% OPACBaseURL %]/cgi-bin/koha/opac-detail.pl?biblionumber=[% review.biblionumber %]&amp;reviewid=[% review.reviewid %]</guid>
        <pubDate>[% review.timestamp %]</pubDate>
index 87b9ae5..464aa21 100644 (file)
@@ -45,7 +45,7 @@
                                                 [% END %]
                                             [% END %]
                                             [% IF ( review.title ) %][% review.title %][% ELSE %]No title[% END %]
-                                            [% FOREACH subtitl IN review.subtitle %] [% subtitl.subfield %][% END %]
+                                            [% FOREACH subtitl IN review.subtitle %] [% subtitl.subfield |html %][% END %]
                                             </a>
                                             [% IF ( review.author ) %]
                                                 by <a href="/cgi-bin/koha/opac-search.pl?q=au:[% review.author |url %]" title="Search for works by this author" class="author">[% review.author %]</a>
@@ -84,7 +84,7 @@
                                                 <img class="avatar" src="[% review.avatarurl %]" height="40" width="40" alt="" />
                                             [% END %]
                                             [% FILTER html_break %]
-                                                [% review.review %]
+                                                [% review.review |html %]
                                             [% END %]
                                         <span style="font-size:87%;font-color:#CCC;">Added [% review.datereviewed | $KohaDates %] [% IF ( review.your_comment ) %] by <strong>you</strong>[% ELSE %]
                                         [% IF ( review.borrowernumber && ShowReviewer != "none" ) %] by
                                         [% bt_id = ( review.normalized_upc || review.normalized_isbn ) %]
                                         [% IF ( BakerTaylorEnabled ) %]
                                             [% IF ( bt_id ) %]
-                                                <a href="https://[% review.BakerTaylorBookstoreURL %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% review.BakerTaylorImageURL %][% bt_id %]" /></a>
+                                                <a href="https://[% review.BakerTaylorBookstoreURL |html %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% review.BakerTaylorImageURL |html %][% bt_id %]" /></a>
                                             [% ELSE %]
                                                 <span class="no-image">No cover image available</span>
                                             [% END %]
index 45b99cf..c176a12 100644 (file)
                                 <form action="/cgi-bin/koha/opac-suggestions.pl" class="form-inline" method="get">
                                     <fieldset>
                                         <label for="title">Search for:</label>
-                                        <input type="text" name="title" id="title" value="[% title %]" />
+                                        <input type="text" name="title" id="title" value="[% title |html %]" />
                                         [% IF Koha.Preference( 'OPACViewOthersSuggestions' ) == 1 %]
                                             [% IF loggedinusername %]
                                                 <label for="suggested_by_anyone">Suggested by:</label>
                                                         </td>
                                                     [% END %]
                                                     <td>
-                                                        <p><strong>[% suggestions_loo.title %]</strong></p>
-                                                            <p>[% IF ( suggestions_loo.author ) %][% suggestions_loo.author %],[% END %]
-                                                                [% IF ( suggestions_loo.copyrightdate ) %] - [% suggestions_loo.copyrightdate %],[% END %]
-                                                                [% IF ( suggestions_loo.publishercode ) %] - [% suggestions_loo.publishercode %][% END %]
-                                                                [% IF ( suggestions_loo.place ) %]([% suggestions_loo.place %])[% END %]
-                                                                [% IF ( suggestions_loo.collectiontitle ) %] , [% suggestions_loo.collectiontitle %][% END %]
+                                                        <p><strong>[% suggestions_loo.title |html %]</strong></p>
+                                                            <p>[% IF ( suggestions_loo.author ) %][% suggestions_loo.author |html %],[% END %]
+                                                                [% IF ( suggestions_loo.copyrightdate ) %] - [% suggestions_loo.copyrightdate |html %],[% END %]
+                                                                [% IF ( suggestions_loo.publishercode ) %] - [% suggestions_loo.publishercode |html %][% END %]
+                                                                [% IF ( suggestions_loo.place ) %]([% suggestions_loo.place |html %])[% END %]
+                                                                [% IF ( suggestions_loo.collectiontitle ) %] , [% suggestions_loo.collectiontitle |html %][% END %]
                                                                 [% IF ( suggestions_loo.itemtype ) %] - [% AuthorisedValues.GetByCode( 'SUGGEST_FORMAT', suggestions_loo.itemtype, 1 ) %][% END %]
                                                         </p>
                                                     </td>
                                                     <td>
                                                         [% IF ( suggestions_loo.note ) %]
                                                             <span class="tdlabel">Note: </span>
-                                                            [% suggestions_loo.note %]
+                                                            [% suggestions_loo.note |html %]
                                                         [% END %]
                                                     </td>
                                                     [% IF Koha.Preference( 'OPACViewOthersSuggestions' ) == 1 %]
                                                         [% ELSIF ( suggestions_loo.REJECTED ) %]Suggestion declined
                                                         [% ELSIF ( suggestions_loo.AVAILABLE ) %]Available in the library
                                                         [% ELSE %] [% AuthorisedValues.GetByCode( 'SUGGEST_STATUS', suggestions_loo.STATUS, 1 ) %] [% END %]
-                                                        [% IF ( suggestions_loo.reason ) %]([% suggestions_loo.reason %])[% END %]
+                                                        [% IF ( suggestions_loo.reason ) %]([% suggestions_loo.reason |html %])[% END %]
                                                     </td>
                                                 </tr>
                                             [% END # / FOREACH suggestions_loo %]
index da39882..295c32d 100644 (file)
@@ -97,7 +97,7 @@
                             <div id="tagcloud">
                                 [% FOREACH TAGLOO IN TAGLOOP %]
                                     <span class="tag tagweight[% TAGLOO.stratum %]" id="tag[% loop.count %]" style="display:inline;">
-                                    <a href="/cgi-bin/koha/opac-search.pl?tag=[% TAGLOO.term |url %]&amp;q=[% TAGLOO.term |url %]">[% TAGLOO.term %]</a>
+                                    <a href="/cgi-bin/koha/opac-search.pl?tag=[% TAGLOO.term |url %]&amp;q=[% TAGLOO.term |url %]">[% TAGLOO.term |html %]</a>
                                     <span class="tagweight">[% TAGLOO.weight_total %]</span>
                                     </span>
                                 [% END %]
                                             <td class="tagterm">
                                                 <span class="tdlabel">Tag:</span>
                                                 [% IF MY_TAG.approved == 1 %]
-                                                    <a href="/cgi-bin/koha/opac-search.pl?tag=[% MY_TAG.term |url %]&amp;q=[% MY_TAG.term |url %]">[% MY_TAG.term %]</a>
+                                                    <a href="/cgi-bin/koha/opac-search.pl?tag=[% MY_TAG.term |url %]&amp;q=[% MY_TAG.term |url %]">[% MY_TAG.term |html %]</a>
                                                 [% ELSE %]
-                                                    [% MY_TAG.term %] (not approved)
+                                                    [% MY_TAG.term |html %] (not approved)
                                                 [% END %]
                                             </td>
+
                                             <td>
                                                 [% IF ( MY_TAG.XSLTBloc ) %]
-                                                    [% MY_TAG.XSLTBloc.raw %]
+                                                    [% MY_TAG.XSLTBloc %]
                                                 [% ELSE %]
                                                     <span class="tdlabel">Title:</span>
                                                     <a class="title" href="/cgi-bin/koha/opac-detail.pl?biblionumber=[% MY_TAG.biblionumber %]">
-                                                        [% MY_TAG.title %]
+                                                        [% MY_TAG.title |html %]
                                                         [% IF ( MY_TAG.subtitle ) %]
                                                             [% FOREACH subtitle IN MY_TAG.subtitle %]
-                                                                [% subtitle.subfield %]
+                                                                [% subtitle.subfield |html %]
                                                             [% END %]
                                                         [% END %]
                                                     </a>
index 92975db..f3194b2 100644 (file)
@@ -41,7 +41,7 @@
                                     </fieldset>
 
                                     [% FOREACH LOO IN LOOP %]
-                                        <a href="/cgi-bin/koha/opac-search.pl?idx=su&amp;q=&quot;[% LOO.entry %]&quot;" style="font-size:[% LOO.weight %]px;">[% LOO.entry %]</a>
+                                        <a href="/cgi-bin/koha/opac-search.pl?idx=su&amp;q=&quot;[% LOO.entry |html %]&quot;" style="font-size:[% LOO.weight %]px;">[% LOO.entry %]</a>
                                     [% END %]
                                 [% ELSE %]
                                     <p>Note: This feature only available to French catalogs where ISBD subjects have been populated, and an index built by separate script.</p>
index d881264..672e241 100644 (file)
@@ -44,7 +44,7 @@
                                     [% branch %]
                                     [% END %]
                                     [% IF ( timeLimit != 999 ) %]
-                                    in the past [% timeLimitFinite %] months
+                                    in the past [% timeLimit |html %] months
                                     [% ELSE %] of all time[% END %]
                                 </caption>
                                 <thead>
@@ -58,7 +58,7 @@
                                 <tbody>
                                     [% FOREACH result IN results %]
                                         <tr>
-                                            <td><a class="title" href="/cgi-bin/koha/opac-detail.pl?biblionumber=[% result.biblionumber %]">[% result.title %]</a><p>[% result.author %]
+                                            <td><a class="title" href="/cgi-bin/koha/opac-detail.pl?biblionumber=[% result.biblionumber %]">[% result.title |html %]</a><p>[% result.author %]
                                             [% IF ( result.publishercode ) %]- [% result.publishercode %][% END %]
                                             [% IF ( result.place ) %][% result.place %][% END %]
                                             [% IF ( result.publicationyear ) %]
index 28b237e..3a8b016 100644 (file)
@@ -31,7 +31,7 @@
                                 <ul>
                                     [% FOREACH bor_messages_loo IN bor_messages_loop %]
                                         <li>
-                                        <strong>[% bor_messages_loo.message.raw %]</strong><br>
+                                        <strong>[% bor_messages_loo.message %]</strong><br>
                                         &nbsp;&nbsp;&nbsp;<i>Written on [% bor_messages_loo.message_date | $KohaDates %] by [% bor_messages_loo.branchname %]</i>
                                         </li>
                                     [% END %]
@@ -89,7 +89,7 @@
                         <div class="alert">
                             <ul>
                                 [% IF ( userdebarred ) %]
-                                    <li id="userdebarred"><strong>Please note:</strong> Your account has been frozen[% IF ( BORROWER_INFO.userdebarreddate ) %] until <span id="userdebarred_date">[% BORROWER_INFO.userdebarreddate | $KohaDates %]</span>[% END %][% IF ( BORROWER_INFO.debarredcomment ) %] with the comment <span id="userdebarred_comment">"[% BORROWER_INFO.debarredcomment.raw %]"</span>[% END %]. Usually the reason for freezing an account is old overdues or damage fees. If <a href="/cgi-bin/koha/opac-account.pl">your account page</a> shows your account to be clear, please contact the library.</li>
+                                    <li id="userdebarred"><strong>Please note:</strong> Your account has been frozen[% IF ( BORROWER_INFO.userdebarreddate ) %] until <span id="userdebarred_date">[% BORROWER_INFO.userdebarreddate | $KohaDates %]</span>[% END %][% IF ( BORROWER_INFO.debarredcomment ) %] with the comment <span id="userdebarred_comment">"[% BORROWER_INFO.debarredcomment %]"</span>[% END %]. Usually the reason for freezing an account is old overdues or damage fees. If <a href="/cgi-bin/koha/opac-account.pl">your account page</a> shows your account to be clear, please contact the library.</li>
                                 [% END %]
                                 [% IF ( BORROWER_INFO.gonenoaddress ) %]
                                     <li id="gonenoaddress"><strong>Please note:</strong> According to our records, we don't have up-to-date [% UNLESS OPACPatronDetails %]<a href="/cgi-bin/koha/opac-memberentry.pl">contact information</a>[% ELSE %]contact information[% END %] on file.  Please contact the library[% IF OPACPatronDetails %] or use the <a href="/cgi-bin/koha/opac-memberentry.pl">online update form</a> to submit current information (<em>Please note:</em> there may be a delay in restoring your account if you submit online)[% END %].</li>
                         </div>
                     [% END # / IF patron_flagged %]
 
-                    [% IF OPACMySummaryNote %][% Koha.Preference('OPACMySummaryNote').raw %][% END %]
+                    [% SET OPACMySummaryNote = Koha.Preference('OPACMySummaryNote') %]
+                    [% IF OPACMySummaryNote %][% OPACMySummaryNote %][% END %]
 
                     <div id="opac-user-views" class="toptabs">
                         <ul>
                                                     [% IF ( BakerTaylorEnabled ) %]
                                                         [% bt_id = ( ISSUE.normalized_upc || ISSUE.normalized_isbn ) %]
                                                         [% IF ( bt_id ) %]
-                                                            <a href="https://[% BakerTaylorBookstoreURL %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL %][% bt_id %]" /></a>
+                                                            <a href="https://[% BakerTaylorBookstoreURL |html %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL |html %][% bt_id %]" /></a>
                                                         [% ELSE %]
                                                             <span class="no-image">No cover image available</span><!-- BakerTaylor needs normalized_upc or normalized_isbn! -->
                                                         [% END %]
                                                 </td>[% END # / IF JacketImages %]
 
                                                 <td class="title">
-                                                    <a class="title" href="/cgi-bin/koha/opac-detail.pl?biblionumber=[% ISSUE.biblionumber %]">[% ISSUE.title %] [% FOREACH subtitl IN ISSUE.subtitle %] [% subtitl.subfield %][% END %]</a>
+                                                    <a class="title" href="/cgi-bin/koha/opac-detail.pl?biblionumber=[% ISSUE.biblionumber %]">[% ISSUE.title |html %] [% FOREACH subtitl IN ISSUE.subtitle %] [% subtitl.subfield %][% END %]</a>
                                                     <span class="item-details">[% ISSUE.author %]</span>
                                                 </td>
                                                 [% IF ( ISSUE.overdue ) %]
                                                     </td>
                                                 [% END %]
                                                 [% IF ( OPACMySummaryHTML ) %]
-                                                    <td class="links">[% ISSUE.MySummaryHTML.raw %]</td>
+                                                    <td class="links">[% ISSUE.MySummaryHTML %]</td>
                                                 [% END %]
                                             </tr>
                                         [% END # /FOREACH ISSUES %]
                                                     [% IF ( BakerTaylorEnabled ) %]
                                                         [% bt_id = ( OVERDUE.normalized_upc || OVERDUE.normalized_isbn ) %]
                                                         [% IF ( bt_id ) %]
-                                                            <a href="https://[% BakerTaylorBookstoreURL %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL %][% bt_id %]" /></a>
+                                                            <a href="https://[% BakerTaylorBookstoreURL |html %][% bt_id %]"><img alt="See Baker &amp; Taylor" src="[% BakerTaylorImageURL |html %][% bt_id %]" /></a>
                                                         [% ELSE %]
                                                             <span class="no-image">No cover image available</span><!-- BakerTaylor needs normalized_upc or normalized_isbn! -->
                                                         [% END %]
                                                 [% END # /IF jacketcell %]
 
                                                 <td>
-                                                    <a class="title" href="/cgi-bin/koha/opac-detail.pl?bib=[% OVERDUE.biblionumber %]">[% OVERDUE.title %] [% FOREACH subtitl IN OVERDUE.subtitle %] [% subtitl.subfield %][% END %]
+                                                    <a class="title" href="/cgi-bin/koha/opac-detail.pl?bib=[% OVERDUE.biblionumber %]">[% OVERDUE.title |html %] [% FOREACH subtitl IN OVERDUE.subtitle %] [% subtitl.subfield %][% END %]
                                                     </a>
                                                     <span class="item-details">[% OVERDUE.author %]</span></td>
 
index c41e6dc..3bf2f15 100644 (file)
@@ -7,8 +7,8 @@
  <link rel="stylesheet" type="text/css" href="[% interface %]/[% theme %]/lib/bootstrap/css/bootstrap.min.css" />
 <link rel="stylesheet" type="text/css" href="[% interface %]/[% theme %]/lib/jquery/jquery-ui.css" />
 <link rel="stylesheet" type="text/css" href="[% interface %]/[% theme %]/css/sco.css" />
-[% IF ( OPACUserCSS ) %]<style type="text/css">[% OPACUserCSS.raw %]</style>[% END %]
-[% IF ( SCOUserCSS ) %]<style type="text/css">[% SCOUserCSS.raw %]</style>[% END %]
+[% IF ( OPACUserCSS ) %]<style type="text/css">[% OPACUserCSS %]</style>[% END %]
+[% IF ( SCOUserCSS ) %]<style type="text/css">[% SCOUserCSS %]</style>[% END %]
 <!--[if lt IE 9]>
     <script src="[% interface %]/[% theme %]/lib/respond.min.js"></script>
 <![endif]-->
@@ -28,7 +28,7 @@
 
 [% IF ( SelfCheckHelpMessage ) %]
 <div id="selfcheckhelpmessage">
-[% SelfCheckHelpMessage.raw %]
+[% SelfCheckHelpMessage %]
 </div>
 [% END %]
 
@@ -61,5 +61,5 @@ The Submit button only needs to be clicked if you enter the barcode manually.</p
 
 [% INCLUDE 'opac-bottom.inc' %]
 [% BLOCK jsinclude %]
-[% IF ( SCOUserJS ) %]<script type="text/javascript">[% SCOUserJS.raw %]</script>[% END %]
+[% IF ( SCOUserJS ) %]<script type="text/javascript">[% SCOUserJS %]</script>[% END %]
 [% END %]
index 65e1336..3f0b1f3 100644 (file)
@@ -8,8 +8,8 @@
 <link rel="stylesheet" type="text/css" href="[% interface %]/[% theme %]/lib/bootstrap/css/bootstrap.min.css" />
 <link rel="stylesheet" type="text/css" href="[% interface %]/[% theme %]/lib/jquery/jquery-ui.css" />
 <link rel="stylesheet" type="text/css" href="[% interface %]/[% theme %]/css/sco.css" />
-[% IF ( OPACUserCSS ) %]<style type="text/css">[% OPACUserCSS.raw %]</style>[% END %]
-[% IF ( SCOUserCSS ) %]<style type="text/css">[% SCOUserCSS.raw %]</style>[% END %]
+[% IF ( OPACUserCSS ) %]<style type="text/css">[% OPACUserCSS %]</style>[% END %]
+[% IF ( SCOUserCSS ) %]<style type="text/css">[% SCOUserCSS %]</style>[% END %]
 <!--[if lt IE 9]>
     <script src="[% interface %]/[% theme %]/lib/respond.min.js"></script>
 <![endif]-->
@@ -37,7 +37,7 @@
                             <h3>Item cannot be checked out.</h3>
                             <p>Sorry, this item cannot be checked out at this station.</p>
                             [% IF ( title ) %]
-                                <p>Title: <em>[% title %]</em> </p>
+                                <p>Title: <em>[% title |html %]</em> </p>
                             [% END %]
 
                             <p>
                                                 <td>[% ISSUE.issuedate %]</td>
                                                 <td>
                                                     [% UNLESS ( noitemlinks ) %]
-                                                        <a href="/cgi-bin/koha/opac-detail.pl?bib=[% ISSUE.  biblionumber %]">[% ISSUE.title %]</a>
+                                                        <a href="/cgi-bin/koha/opac-detail.pl?bib=[% ISSUE.  biblionumber %]">[% ISSUE.title |html %]</a>
                                                     [% ELSE %]
-                                                        <strong>[% ISSUE.title %]</strong>
+                                                        <strong>[% ISSUE.title |html %]</strong>
                                                     [% END %]
                                                     <span class="item-details">[% ISSUE.author %]</span>
                                                     ([% ISSUE.barcode %])
                                         [% END # / IF authbylogin %]
 
                                         [% FOREACH INPUT IN INPUTS %]
-                                            <input type="hidden" name="[% INPUT.name %]" value="[% INPUT.value %]">
+                                            <input type="hidden" name="[% INPUT.name |html %]" value="[% INPUT.value |html %]">
                                         [% END %]
                                         <input type="hidden" name="op" value="login" />
                                     </fieldset>
     //]]>
     </script>
 
-    [% IF ( SCOUserJS ) %]<script type="text/javascript">[% SCOUserJS.raw %]</script>[% END %]
+    [% IF ( SCOUserJS ) %]<script type="text/javascript">[% SCOUserJS %]</script>[% END %]
 [% END %]
index 212f3e4..3e62d0e 100644 (file)
@@ -34,7 +34,7 @@
     <div>
         <span class="suggestionlabel">Did you mean:</span>
         [% FOREACH suggestion IN suggestions %]
-            <span class="searchsuggestion"><a href="/cgi-bin/koha/opac-search.pl?q=[% suggestion.search |uri %]">[% suggestion.label %]</a></span>
+            <span class="searchsuggestion"><a href="/cgi-bin/koha/opac-search.pl?q=[% suggestion.search |uri %]">[% suggestion.label |html %]</a></span>
         [% END %]
     </div>
 [% ELSE %]