Sanitized search-related freemarker variables

vivo-project · Mar 21, 2024 · 80a374f · 80a374f
1 parent 602f706
commit 80a374f
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/webapp/src/main/webapp/themes/nemo/templates/search.ftl b/webapp/src/main/webapp/themes/nemo/templates/search.ftl
@@ -8,7 +8,7 @@
 
  <form id="search-form" action="${urls.search}" name="search" role="search" accept-charset="UTF-8" method="GET"> 
  <div id="search-field">
- <input type="text" name="querytext" id="filter_input_querytext" class="search-vivo" value="${querytext!}" autocapitalize="off" />
+ <input type="text" name="querytext" id="filter_input_querytext" class="search-vivo" value="${querytext!?html}" autocapitalize="off" />
  <input type="submit" value="${i18n().search_button}" class="search">
  </div>
  </form>

diff --git a/webapp/src/main/webapp/themes/tenderfoot/templates/page/partials/search.ftl b/webapp/src/main/webapp/themes/tenderfoot/templates/page/partials/search.ftl
@@ -8,7 +8,7 @@
 
  <form id="search-form" action="${urls.search}" name="search" role="search" accept-charset="UTF-8" method="GET">
  <div id="search-field">
- <input type="text" id="filter_input_querytext" name="querytext" class="search-vivo" value="${querytext!}" autocapitalize="off" />
+ <input type="text" id="filter_input_querytext" name="querytext" class="search-vivo" value="${querytext!?html}" autocapitalize="off" />
  <input type="submit" value="${i18n().search_button}" class="search">
  </div>
  </form>

diff --git a/webapp/src/main/webapp/themes/wilma/templates/search.ftl b/webapp/src/main/webapp/themes/wilma/templates/search.ftl
@@ -8,7 +8,7 @@
 
  <form id="search-form" action="${urls.search}" name="search" role="search" accept-charset="UTF-8" method="GET">
  <div id="search-field">
- <input type="text" id="filter_input_querytext" name="querytext" class="search-vivo" value="${querytext!}" autocapitalize="off" />
+ <input type="text" id="filter_input_querytext" name="querytext" class="search-vivo" value="${querytext!?html}" autocapitalize="off" />
  <input type="submit" value="${i18n().search_button}" class="search">
  </div>
  </form>