Added javacript escapes to potential problematic places

LibreBooking · Feb 18, 2021 · 80b8963 · 80b8963
1 parent b203cb9
commit 80b8963
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/tpl/Reservation/pdf.tpl b/tpl/Reservation/pdf.tpl
@@ -262,7 +262,7 @@ pdfDocument.autoTable({
   styles: { lineWidth: 0.02},
   theme: 'plain',
     body: [
-	[{ content: '{translate key=Attachments} ({$Attachments|count})', styles: { fontStyle: 'bold'}},
+	[{ content: '{translate key=Attachments|escape:'javascript'} ({$Attachments|count})', styles: { fontStyle: 'bold'}},
 	],
 	{foreach from=$Attachments item=attachment}
 	[{ content: '{$attachment->FileName()|escape:'javascript'}'},
@@ -278,7 +278,7 @@ pdfDocument.autoTable({
   columnStyles: { 1: { cellWidth: 10}},
   theme: 'plain',
     body: [
-	[{ content: '{translate key=IAccept} {translate key=TheTermsOfService}', styles: { fontStyle: 'bold'}},
+	[{ content: '{translate key=IAccept|escape:'javascript'} {translate key=TheTermsOfService}', styles: { fontStyle: 'bold'}},
 	 { content: 'X', styles: { fontStyle: 'bold', halign: 'center'}},
 	],
 	]