Bug 20945: (RM follow-up) Escape param_name too
authorNick Clemens <nick@bywatersolutions.com>
Fri, 29 Jun 2018 20:09:38 +0000 (20:09 +0000)
committerNick Clemens <nick@bywatersolutions.com>
Fri, 29 Jun 2018 20:09:38 +0000 (20:09 +0000)
Signed-off-by: Nick Clemens <nick@bywatersolutions.com>

koha-tmpl/intranet-tmpl/prog/en/includes/reports-toolbar.inc

index b773c9b..4d89ed5 100644 (file)
@@ -50,7 +50,7 @@
         [% IF ( execute ) %]
             [% BLOCK params %]
                 [%- FOREACH param IN sql_params %]&amp;sql_params=[% param | uri %][% END %]
-                    [%- FOREACH param_name IN param_names %]&amp;param_name=[% param_name %][% END %]
+                    [%- FOREACH param_name IN param_names %]&amp;param_name=[% param_name | uri %][% END %]
             [%- END %]