From 206b01a5a843cba1d876e216f99fc41d0278d16c Mon Sep 17 00:00:00 2001
From: viennet <emmanuel@scodoc.org>
Date: Thu, 31 Dec 2020 00:46:21 +0100
Subject: [PATCH] =?UTF-8?q?Fix:=20quote=20html=20calendrier=20absences=20(?=
 =?UTF-8?q?signal=C3=A9=20par=20JMP)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ZAbsences.py               | 5 +++--
 scotests/scointeractive.sh | 2 ++
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/ZAbsences.py b/ZAbsences.py
index 294cfbca..9d0d7275 100644
--- a/ZAbsences.py
+++ b/ZAbsences.py
@@ -47,6 +47,7 @@ L'API de plus bas niveau est en gros:
 import urllib
 import datetime
 import jaxml
+import cgi
 
 # ---------------
 from sco_zope import *
@@ -2279,7 +2280,7 @@ def MonthTableBody(
             if href:
                 href = 'href="%s"' % href
             if descr:
-                descr = 'title="%s"' % descr
+                descr = 'title="%s"' % cgi.escape(descr, quote=True)
             if href or descr:
                 cc.append("<a %s %s>" % (href, descr))
 
@@ -2371,7 +2372,7 @@ def MonthTableBody(
                 if href:
                     href = 'href="%s"' % href
                 if descr:
-                    descr = 'title="%s"' % descr
+                    descr = 'title="%s"' % cgi.escape(descr, quote=True)
                 if href or descr:
                     cc.append("<a %s %s>" % (href, descr))
                 if legend or d == 1:
diff --git a/scotests/scointeractive.sh b/scotests/scointeractive.sh
index 0050c89f..38bf8dfa 100755
--- a/scotests/scointeractive.sh
+++ b/scotests/scointeractive.sh
@@ -28,6 +28,8 @@ if [ "$1" = "-r" ]
 then
     shift
     recreate_dept=1
+else
+    recreate_dept=0
 fi