[Koha-bugs] [Bug 14691] Can't delete patron with ' character in cardnumber

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14691

--- Comment #7 from David Cook <dcook at prosentient.com.au> ---
(In reply to Liz Rea from comment #6)
> Right, ok. So, bug 13618 is nowhere near ready - I think if it isn't ready
> by shortly before string freeze we should go with this one in the meantime
> (and same for bug 14505) because even though we have a workaround (delete
> the '), it still shouldn't break like this.

When I originally mentioned bug 13618, I didn't realize that it wasn't ready
yet, so I think you're totally right about moving ahead with something else in
the meantime.

Another idea would be to upgrade Template Toolkit from version 2.24 to 2.26 and
use the "uri" or "url" filter:

"As of version 2.26 of the Template Toolkit, the uri and url filters use the
unsafe character set defined by RFC3986. This means that certain characters
("(", ")", "~", "*", "!" and the single quote "'") are now deemed unsafe and
will be escaped as hex character sequences. The double quote character ('"') is
now deemed safe and will not be escaped."*
(http://template-toolkit.org/docs/manual/Filters.html#section_uri)

But it seems like Debian is still using 2.24 and only moved to 2.24 in the
Squeeze-Wheezy move...
(https://packages.debian.org/search?keywords=libtemplate-perl)

*I suppose double quote characters could cause problems if the Javascript was
using double quotes instead of single quotes... another idea is to roll our own
TT::Filter...

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.