From f749fc641b2ce6a77dd77b4844046a875d1d0d36 Mon Sep 17 00:00:00 2001
From: Ozzieisaacs <ozzie.fernandez.isaacs@googlemail.com>
Date: Tue, 12 May 2020 17:42:24 +0200
Subject: [PATCH] Temporary fix for #1390

---
 cps/templates/book_edit.html | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/cps/templates/book_edit.html b/cps/templates/book_edit.html
index b72ef197..d19d8d40 100644
--- a/cps/templates/book_edit.html
+++ b/cps/templates/book_edit.html
@@ -305,9 +305,9 @@
     // create a random identifier type to have a valid name in form. This will not be used when dealing with the form
     var rand_id = Math.floor(Math.random() * 1000000).toString();
     var line = '<tr>';
-    line += '<td><input type="text" class="form-control" name="identifier-type-'+ rand_id +'" required="required" placeholder="{{_('Identifier Type')}}"></td>';
-    line += '<td><input type="text" class="form-control" name="identifier-val-'+ rand_id +'" required="required" placeholder="{{_('Identifier Value')}}"></td>';
-    line += '<td><a class="btn btn-default" onclick="removeIdentifierLine(this)">{{_('Remove')}}</a></td>';
+    line += '<td><input type="text" class="form-control" name="identifier-type-'+ rand_id +'" required="required" placeholder="{{_('Identifier Type')|forceescape}}"></td>';
+    line += '<td><input type="text" class="form-control" name="identifier-val-'+ rand_id +'" required="required" placeholder="{{_('Identifier Value')|forceescape}}"></td>';
+    line += '<td><a class="btn btn-default" onclick="removeIdentifierLine(this)">{{_('Remove')|forceescape}}</a></td>';
     line += '</tr>';
     $("#identifier-table").append(line);
   });