LP#1923225: have search highlighting stored procedure do HTML-escaping
authorGalen Charlton <gmc@equinoxinitiative.org>
Wed, 14 Apr 2021 18:30:39 +0000 (14:30 -0400)
committerGalen Charlton <gmc@equinoxOLI.org>
Tue, 25 May 2021 14:34:40 +0000 (10:34 -0400)
commit99d6eaa3413e95a1ee7043ea2096fb11d68e1967
tree3220509ae71f9ddd9a59e01e0054c4611957b0b7
parentda438c19db88f5f49a0f9c4bb2fd1ae11f91d705
LP#1923225: have search highlighting stored procedure do HTML-escaping

This patch builds on the previous work to have the stored procedures
that produced highlighted and unhighlighted versions of display
attributes HTML-escape the source values, then adjusts the TPAC
and Bootstrap templates to avoid double-escaping.

Signed-off-by: Galen Charlton <gmc@equinoxinitiative.org>
Signed-off-by: Galen Charlton <gmc@equinoxOLI.org>
Open-ILS/src/sql/Pg/300.schema.staged_search.sql
Open-ILS/src/sql/Pg/upgrade/XXXX.schema.search_highlight_escape_html.sql [new file with mode: 0644]
Open-ILS/src/templates-bootstrap/opac/parts/record/subjects.tt2
Open-ILS/src/templates-bootstrap/opac/parts/record/summary.tt2