Admin User-Bearbeiten-Maske: JavaScript.escape() nicht als Filter aufrufen

Siehe Commit-Nachricht 70654da für die Begründung.

diff --git a/templates/webpages/admin/edit_user.html b/templates/webpages/admin/edit_user.html
index 8b3bde11ecb37aeeda9ae201fc8835dbc3564e84..34a01a2dede8e5175b764e664cc1ed54c2e945a7 100644 (file)
--- a/templates/webpages/admin/edit_user.html
+++ b/templates/webpages/admin/edit_user.html
@@ -173,7 +173,7 @@
   function submit_delete() {
 [% SET used_for_task_server_in_clients = SELF.is_user_used_for_task_server(SELF.user) %]
 [% IF used_for_task_server_in_clients %]
   function submit_delete() {
 [% SET used_for_task_server_in_clients = SELF.is_user_used_for_task_server(SELF.user) %]
 [% IF used_for_task_server_in_clients %]

-   alert('[% LxERP.t8('The user cannot be deleted as it is used in the following clients: #1', used_for_task_server_in_clients) | js %]');
+   alert('[% JavaScript.escape(LxERP.t8('The user cannot be deleted as it is used in the following clients: #1', used_for_task_server_in_clients)) %]');

    return false;
 [% ELSE %]
     submit_with_action('delete_user');
    return false;
 [% ELSE %]
     submit_with_action('delete_user');