Merge pull request #1561 from lucasmarchd01/issue-1554

Escape special characters in suggested chant data
DDMAL · Jul 16, 2024 · adc2d1c · adc2d1c
2 parents d7522a1 + 89f68d7
commit adc2d1c
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/django/cantusdb_project/main_app/templates/chant_create.html b/django/cantusdb_project/main_app/templates/chant_create.html
@@ -312,10 +312,10 @@ <h5><a id="source" href="{% url 'source-detail' source.id %}">{{ source.siglum }
                                     value="{{ suggestion.cantus_id }}"
                                     title="{{ suggestion.cantus_id }}"
                                     onclick='autoFillSuggestedChant(
-                                        "{{ suggestion.genre_name }}",
+                                        "{{ suggestion.genre_name | escapejs }}",
                                         {{ suggestion.genre_id | default_if_none:"null" }},
-                                        "{{ suggestion.cantus_id }}",
-                                        "{{ suggestion.fulltext }}"
+                                        "{{ suggestion.cantus_id | escapejs }}",
+                                        "{{ suggestion.fulltext | escapejs }}"
                                     )'
                                 >
                                 <strong>{{ suggestion.genre_name }}</strong> - <span title="{{ suggestion.fulltext }}">{{ suggestion.incipit }}</span> (<strong>{{ suggestion.occurrences }}x</strong>)<br>