rel #31887: escape html sensitive chars in url

VERSIONS_HOTLINE/31887

+ - ticket #31887 : Correction de la prise en charge de l'extension de recherche vers Gallica
\ No newline at end of file

library/ZendAfi/View/Helper/TagSearchExtension.php

@@ -60,8 +60,9 @@ class ZendAfi_View_Helper_TagSearchExtension extends ZendAfi_View_Helper_BaseHel
     if (!$site_url || !$site_label)
       return null;
 
+    $url = $this->_injectSearchTerm($site_url);
     return $this->_tag('span',
-                       $this->view->tagAnchor($this->_injectSearchTerm($site_url),
+                       $this->view->tagAnchor($this->view->escape($url),
                                               $site_label));
   }
 

tests/application/modules/opac/controllers/RechercheControllerSearchExtensionTest.php

@@ -148,7 +148,7 @@ class RechercheControllerSearchExtensionEnabledTest
 
   /** @test */
   public function gallicaLinkShouldBeRendered() {
-    $this->assertXPathContentContains('//a[contains(@href, "gallica all ")]',
+    $this->assertXPathContentContains('//a[contains(@href, "gallica all ")][contains(@href, "sport")]',
                                       'Gallica');
   }
 }