Bug 7618 Escape HTML special characters for SQL displayed above results in Report...

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
Signed-off-by: Paul Poulain <paul.poulain@biblibre.com>

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/guided_reports_start.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/reports/guided_reports_start.tt
index caf27f1..137fdbf 100644 (file)
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/reports/guided_reports_start.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/reports/guided_reports_start.tt
@@ -496,7 +496,7 @@ canned reports and writing custom SQL reports.</p>
 <h1>[% name %]</h1>
 [% IF ( notes ) %]<p>[% notes %]</p>[% END %]
 [% IF ( unlimited_total ) %]<p>Total number of rows matching the (unlimited) query is [% unlimited_total %].</p>[% END %]
-<pre id="sql_output">[% sql %]</pre>
+<pre id="sql_output">[% sql |html %]</pre>
 <div class="pages">[% pagination_bar %]</div>
 [% UNLESS ( errors ) %]
 <table>