X-Git-Url: https://git.plutz.net/?p=confetti;a=blobdiff_plain;f=templates%2Fcategories.html.sh;h=75223bb856eb50242442287ae8386ec1312ead2b;hp=5375965027dd10b91f8d10db4494c614c978a0a3;hb=069a829a781c2799836843fe037dc44d1af5c9db;hpb=5414898a3baef825844eda3f4416bfea5ecc9555

diff --git a/templates/categories.html.sh b/templates/categories.html.sh
index 5375965..75223bb 100755
--- a/templates/categories.html.sh
+++ b/templates/categories.html.sh
@@ -1,4 +1,4 @@
-# Copyright 2015 Paul Hänsch
+# Copyright 2015, 2017, 2018 Paul Hänsch
 #
 # This file is part of Confetti.
 # 
@@ -17,33 +17,32 @@
 
 cat_listing(){
   list_categories | while read cat; do
-    cat <<-END
-	<li>${cat}<button type="submit" name="remove" value="${cat}">$(l10n cat_remove)</button></li>
-	END
+    printf '<li>%s<button type="submit" name="remove" value="%s">%s</button></li>\n' \
+           "$(htmlsafe "$cat")" "$(attribsafe "$cat")" "$(l10n cat_remove)"
   done
 }
 
 list_catsel(){
   card="$1"
-  cats="$(get_categories $card)"
+  cats="$(get_categories "$card")"
 
   list_categories |while read cat; do
-  cat <<-END
-	<li><label><input type="checkbox" name="$card" value="$cat"
-	$(printf %s "$cats" |grep -qF "$cat" && printf %s 'checked="checked"')>${cat}</label></li>
-	END
+    printf '<li><label><input %s type="checkbox" name="%s" value="%s">%s</label></li>' \
+	   "$(printf %s "$cats" |grep -qF "$cat" && printf 'checked="checked"')" \
+           "$(attribsafe "$card")" "$(attribsafe "$cat")" "$(htmlsafe "$cat")" 
   done
 }
 
 display_catsel(){
   card="$1"
-  cat <<-END
-	<li><h2>$(get_name "$card")</h2><ul>$(list_catsel "$card")</ul></li>
-	END
+  printf '<li><h2>%s</h2><ul>' "$(htmlsafe "$(get_name "$card")")"
+  list_catsel "$card"
+  printf '</ul></li>'
 }
 
 cat <<EOF
 <form class="categories" action="?action=edit_categories" method="POST">
+  <input type="submit" class="fakeorder" name="add" value="add" />
   <h1>$(l10n categories_label)</h1>
   <input type="hidden" name="page" value="categories"/>
   <ul>
@@ -60,12 +59,16 @@ cat <<EOF
     <button type="submit" name="submit" value="submit">$(l10n cat_update)</button>
   </fieldset>
   <ul class="namelist">
-    $(listcards |while read card; do display_catsel "$card"; done )
+EOF
+listcards \
+| while read card; do
+  display_catsel "$card"
+done
+cat <<EOF
   </ul>
   <fieldset>
     <button type="submit" name="submit" value="submit">$(l10n cat_update)</button>
   </fieldset>
 </form>
-
 EOF