https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42790

--- Comment #30 from Paul Derscheid <[email protected]> ---
Created attachment 210110
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=210110&action=edit
Bug 42790: (QA follow-up) Escape the cancellation reason in the status badge

- The reason is free text and statusBadge() put it into the badge
  markup unescaped
- Pass it through escape_str()

Test plan:
1. Make item type BK bookable and place a booking on biblionumber 1
2. Go to /cgi-bin/koha/bookings/list.pl?biblionumber=1
3. Cancel the booking with the reason <b>BOLD</b>
4. Click 'Include cancelled'
5. Without this patch the badge shows 'Cancelled: BOLD' in bold; with
   it, the literal text 'Cancelled: <b>BOLD</b>'

Assisted-by: Opus 5.5 (Anthropic)
Signed-off-by: Paul Derscheid <[email protected]>

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to