https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14716 --- Comment #64 from Martin Renvoize <martin.renvoize@ptfs-europe.com> --- Great work.. as commented on irc earlier.. I found a few cases where we could be escaping but we're not yet: 1) Where we're searching the `an:` index. Unfortunately, we can't guarantee the marc field we're referring to won't contain any nasty characters. 2) rcn:<xsl:value-of select="marc:controlfield[@tag=001]"/> - 001 isn't entirely guaranteed to be clean either 3) The 'extractControlNumber' template appears to do it's own escaping.. perhaps we could convert this to use the str:encode-uri filter you're importing - This is by no means a failure case though. That's all I can find.. nice work. -- You are receiving this mail because: You are watching all bug changes.