https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21418 Bug ID: 21418 Summary: Incorrectly filtered markup in staff client lists Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: ASSIGNED Severity: critical Priority: P5 - low Component: Staff Client Assignee: oleonard@myacpl.org Reporter: oleonard@myacpl.org QA Contact: testopia@bugs.koha-community.org CC: bgkriegel@gmail.com, brendan@bywatersolutions.com, chris@bigballofwax.co.nz, dcook@prosentient.com.au, ere.maijala@helsinki.fi, fridolin.somers@biblibre.com, george@nekls.org, gmcharlt@gmail.com, j.kylmala@gmail.com, jonathan.druart@bugs.koha-community.org, julian.maurice@biblibre.com, katrin.fischer@bsz-bw.de, kohadevinim@devinim.com.tr, kyle@bywatersolutions.com, liz@catalyst.net.nz, m.de.rooy@rijksmuseum.nl, martin.renvoize@ptfs-europe.com, mirko@abunchofthings.net, mtompset@hotmail.com, nick@bywatersolutions.com, testopia@bugs.koha-community.org, tomascohen@gmail.com, veron@veron.ch Depends on: 13618 The AJAX DataTable of existing lists is broken because the action buttons are incorrectly rendered. The "| html" filter should be removed from the action_block declarations. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 [Bug 13618] Prevent XSS in the Staff Client and the OPAC -- You are receiving this mail because: You are watching all bug changes.