From 344a272f57666d94060eee24ae321d65540b3553 Mon Sep 17 00:00:00 2001
From: gnieark <gnieark@free.fr>
Date: Thu, 15 Jul 2021 10:48:21 +0200
Subject: [PATCH] webui: quote strings with slashes in pool details view

Strings comming from "translate" function can contain apostrophes that need to be escaped.
---
 webui/module/Pool/view/pool/pool/details.phtml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/webui/module/Pool/view/pool/pool/details.phtml b/webui/module/Pool/view/pool/pool/details.phtml
index 1b08a316709..28e735969ee 100644
--- a/webui/module/Pool/view/pool/pool/details.phtml
+++ b/webui/module/Pool/view/pool/pool/details.phtml
@@ -295,23 +295,23 @@ $this->headTitle($title);
       html.push('<div class="container-fluid">');
       html.push('<table class="table table-bordered">');
       html.push('<tr>');
-      html.push('<th><?php echo $this->translate("Label date"); ?></th>');
+      html.push('<th><?php echo addslashes($this->translate("Label date")); ?></th>');
       html.push('<td>' + row.labeldate + '</td>');
       html.push('</tr>');
       html.push('<tr>');
-      html.push('<th><?php echo $this->translate("First written"); ?></th>');
+      html.push('<th><?php echo addslashes($this->translate("First written")); ?></th>');
       html.push('<td>' + row.firstwritten + '</td>');
       html.push('</tr>');
       html.push('<tr>');
-      html.push('<th><?php echo $this->translate("Last written"); ?></th>');
+      html.push('<th><?php echo addslashes($this->translate("Last written")); ?></th>');
       html.push('<td>' + row.lastwritten + '</td>');
       html.push('</tr>');
       html.push('<tr>');
-      html.push('<th><?php echo $this->translate("Volume jobs"); ?></th>');
+      html.push('<th><?php echo addslashes($this->translate("Volume jobs")); ?></th>');
       html.push('<td>' + row.voljobs + '</td>');
       html.push('</tr>');
       html.push('<tr>');
-      html.push('<th><?php echo $this->translate("Recycle"); ?></th>');
+      html.push('<th><?php echo addslashes($this->translate("Recycle")); ?></th>');
       html.push('<td>' + formatRecycle(row.recycle) + '</td>');
       html.push('</tr>');
       html.push('</table>');