Bug 21526: uri escape TT variables when used in 'a href'
[koha_ffzg] / koha-tmpl / intranet-tmpl / prog / en / modules / members / discharges.tt
index f65bddc..c2b271f 100644 (file)
@@ -33,7 +33,7 @@
           <tbody>
             [% FOREACH d IN pending_discharges %]
               <tr>
-                <td><a href="/cgi-bin/koha/members/discharge.pl?borrowernumber=[% d.borrower.borrowernumber | html %]">[% d.borrower.surname | html %], [% d.borrower.firstname | html %]</a></td>
+                <td><a href="/cgi-bin/koha/members/discharge.pl?borrowernumber=[% d.borrower.borrowernumber | uri %]">[% d.borrower.surname | html %], [% d.borrower.firstname | html %]</a></td>
                 <td>[% d.borrower.branchcode.branchname | html %]</td>
                 <td><span title="[% d.needed | html %]">[% d.needed | $KohaDates %]</span></td>
                 <td><a class="btn btn-xs btn-default" href="/cgi-bin/koha/members/discharges.pl?op=allow&borrowernumber=[% d.borrower.borrowernumber | html %]"><i class="fa fa-check"></i> Allow</a></td>