To test:
1) Create a list in the OPAC, name it: <script>alert('Hello');</script>
2) Delete the list
3) Confirm deletion
4) See the alert say 'Hello'
5) Apply patch
6) Recreate list with same name
7) Delete list
8) Confirm deletion and alert no longer pops up
Signed-off-by: Katrin Fischer <Katrin.Fischer.83@web.de>
Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
Signed-off-by: Tomas Cohen Arazi <tomascohen@gmail.com>
(cherry picked from commit
9bef8f8738492564af7da78cba841366c70ada3c)
Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
(cherry picked from commit
cab96a3c8c4cf1827bf3350107e82da75b8b8856)
<div class="alert">A record matching barcode <b>[% paramsloo.duplicatebiblio %]</b> has already been added.</div>
[% END %]
[% IF ( paramsloo.delete_ok ) %]
- <div class="alert alert-info">List [% paramsloo.delete_ok %] Deleted.</div>
+ <div class="alert alert-info">List [% paramsloo.delete_ok |html %] Deleted.</div>
[% END %]
[% IF ( paramsloo.delete_fail ) %]
- <div class="alert alert-info">ERROR: Database error. Delete (list number [% paramsloo.delete_fail %]) failed.</div>
+ <div class="alert alert-info">ERROR: Database error. Delete (list number [% paramsloo.delete_fail |html %]) failed.</div>
[% END %]
[% IF ( paramsloo.unrecognized ) %]
<div class="alert alert-info">ERROR: List number [% paramsloo.unrecognized %] unrecognized.</div>