Fix for issue LibreBooking#88

Fixes the missing escaping (LibreBooking#88)
AurimasF · Dec 9, 2021 · 358c3e2 · 358c3e2
1 parent c0dd983
commit 358c3e2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/tpl/Reservation/pdf.tpl b/tpl/Reservation/pdf.tpl
@@ -146,7 +146,7 @@ $('.btnPDF').click(function (e) {
 		],
 		{foreach from=$AvailableResources item=resource}
 			{if is_array($AdditionalResourceIds) && in_array($resource->Id, $AdditionalResourceIds)}
-				[{ content: '{$resource->Name}'},
+				[{ content: '{$resource->Name|escape:'javascript'}'},
 				 { content: '{if $resource->GetRequiresApproval()}X{/if}', styles: { fontStyle: 'bold', halign: 'center'}},
 				 { content: '{if $resource->IsCheckInEnabled()}X{/if}', styles: { fontStyle: 'bold', halign: 'center'}},
 				 { content: '{if $resource->IsAutoReleased()}{$resource->GetAutoReleaseMinutes()}{else} - {/if}', styles: { halign: 'center'}},