Bug 19103: Fix Stored XSS in patron-attr-types.pl

[koha.git] / koha-tmpl / intranet-tmpl / prog / en / modules / tools / batchMod-edit.tt

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batchMod-edit.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batchMod-edit.tt
index e774e95..c25dfe4 100644 (file)
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batchMod-edit.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/tools/batchMod-edit.tt
@@ -24,7 +24,6 @@ $(document).ready(function(){
       row = row.replace("row","hint");
       var editor = $(this).parent().find("[name='field_value']");
       if ($(this).is(":checked")) {
-          $(this).val($(this).siblings("[name='subfield']").val());
           $(editor).prop('disabled', true);
           $("#"+row).html(_("This subfield will be deleted"));
       } else {
@@ -99,7 +98,7 @@ $(document).ready(function(){
     </thead>
     <tbody>
         [% FOREACH notfoundbarcode IN notfoundbarcodes %]
-      <tr><td>[% notfoundbarcode.barcode %]</td></td>
+      <tr><td>[% notfoundbarcode.barcode |html %]</td></td>
         [% END %]
     </tbody>
       </table>