Bug 14416: Stored XSS vulnerability
[koha.git] / koha-tmpl / intranet-tmpl / prog / en / modules / virtualshelves / tables / shelves_results.tt
1 [% USE KohaDates %]
2 {
3     "sEcho": [% sEcho %],
4     "iTotalRecords": [% iTotalRecords %],
5     "iTotalDisplayRecords": [% iTotalDisplayRecords %],
6     "aaData": [
7         [% FOREACH data IN aaData %]
8             {
9                 "dt_type":
10                     "[% data.type %]",
11                 "dt_shelfname":
12                     "<a href='/cgi-bin/koha/virtualshelves/shelves.pl?viewshelf=[% data.shelfnumber %]'>[% data.shelfname | html%]</a>",
13                 "dt_count":
14                     "[% data.count %] item(s)",
15                 "dt_owner":
16                     "<a href='/cgi-bin/koha/members/moremember.pl?borrowernumber=[% data.owner %]'>[% data.firstname %] [% data.surname %]</a>",
17                 "dt_sortby":
18                     [% IF data.sortby == "author" %]"Author"[% ELSIF data.sortby == "copyrightdate" %]"Year"[% ELSIF data.sortby == "itemcallnumber" %]"Call number"[% ELSE %]"Title"[% END %],
19                 "dt_created_on":
20                     "[% data.created_on | $KohaDates %]",
21                 "dt_modification_time":
22                     "[% data.modification_time | $KohaDates %]",
23                 "dt_action":
24                     "<a style=\"cursor:pointer\">[% PROCESS action_form shelfnumber=data.shelfnumber can_manage_shelf=data.can_manage_shelf can_delete_shelf=data.can_delete_shelf type=data.type %]</a>"
25             }[% UNLESS loop.last %],[% END %]
26         [% END %]
27     ]
28 }
29
30 [% BLOCK action_form -%]
31     [%- IF can_manage_shelf -%]
32 <form action='shelves.pl' method='get'><input type='hidden' name='shelfnumber' value='[% shelfnumber %]' /><input type='hidden' name='op' value='modif' /><input type='submit' class='editshelf' value='Edit' /></form>[% IF can_manage_shelf OR can_delete_shelf %]<form action='shelves.pl' method='post'><input type='hidden' name='shelfoff' value='[% shelfoff %]' /><input type='hidden' name='shelves' value='1' /><input type='hidden' name='DEL-[% shelfnumber %]' value='1' /><input type='hidden' name='CONFIRM-[% shelfnumber %]' value='1' />[% IF type == 1 %]<input type='hidden' name='display' value='privateshelves' />[% ELSE %]<input type='hidden' name='display' value='publicshelves' />[% END %]<input type='submit' class='deleteshelf' onclick='return confirmDelete(MSG_CONFIRM_DELETE_LIST)' value='Delete' /></form>[% END %]
33     [%- ELSE -%]
34         None
35     [%- END -%]
36 [%- END %]