--- loncom/publisher/lonpubmenu.pm	2009/02/26 16:10:49	1.6
+++ loncom/publisher/lonpubmenu.pm	2015/06/09 21:23:27	1.7
@@ -1,7 +1,7 @@
 # The LearningOnline Network with CAPA
 # Construction Space Buttons for Top Frame 
 #
-# $Id: lonpubmenu.pm,v 1.6 2009/02/26 16:10:49 schafran Exp $
+# $Id: lonpubmenu.pm,v 1.7 2015/06/09 21:23:27 damieng Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -34,10 +34,13 @@ use Apache::loncommon;
 
 sub handler {
     my $r = shift;
-    my %lt=&Apache::lonlocal::texthash(
+    my %js_lt=&Apache::lonlocal::texthash(
                                        cnpd => 'Cannot publish directory',
                                        cnrd => 'Cannot retrieve directory',
                                        mcdi => 'Must create new subdirectory inside a directory',
+                                      );
+    &js_escape(\%js_lt);
+    my %html_lt=&Apache::lonlocal::texthash(
                                        pubr => 'Publish this Resource',
                                        pubd => 'Publish this Directory',
                                        rtrv => 'Retrieve Old Version',
@@ -63,6 +66,7 @@ sub handler {
                                        go => 'Go',
                                        prnt => 'Print'
                                       );
+    &html_escape(\%html_lt);
     &Apache::loncommon::get_unprocessed_cgi($ENV{'QUERY_STRING'},['disp']);
     my $disp = $env{'form.disp'};
 # set defaults for parent directory in case frameloc is unable to determine directory
@@ -121,7 +125,7 @@ function getactionfilename() {
       if ((document.fileaction.filename.value.charAt(
            document.fileaction.filename.value.length-1)!='/') &&
            (document.fileaction.filename.value.indexOf('/adm/pubdir')==-1)) {
-          alert('$lt{'mcdi'}');
+          alert('$js_lt{'mcdi'}');
           return;
       }
    }
@@ -208,7 +212,7 @@ function getfilename() {
       (document.publisher.filename.value.indexOf('/adm/pubdir')==-1)) {
         document.publisher.submit();
     } else {
-        alert('$lt{'cnpd'}');
+        alert('$js_lt{'cnpd'}');
     }
 }
 
@@ -219,7 +223,7 @@ function getrfilename() {
        (document.rpublisher.filename.value.indexOf('/adm/pubdir')==-1)) {
         document.rpublisher.submit();
    } else {
-      alert('$lt{'cnrd'}');
+      alert('$js_lt{'cnrd'}');
    }
 }
 
@@ -245,14 +249,14 @@ END
                     <form name="publishdir" action="/adm/publish" target="_parent" method="post">
                       <input type="hidden" name="filename" value="" />
                       <input type="hidden" name="forcerepub" value="NO" />
-                      <input type="button" value="'.$lt{'pubd'}.'" onclick="getdirname();" />
+                      <input type="button" value="'.$html_lt{'pubd'}.'" onclick="getdirname();" />
                     </form>
                  ');
     } else {
         $r->print('
                     <form name="publisher" action="/adm/publish" target="_parent" method="post">
                       <input type="hidden" name="filename" value="" />
-	              <input type="button" value="'.$lt{'pubr'}.'" onclick="getfilename();" />
+	              <input type="button" value="'.$html_lt{'pubr'}.'" onclick="getfilename();" />
                     </form>
                    ');
     }
@@ -262,7 +266,7 @@ END
 		  <td bgcolor="#ccddaa" align="center">
 		    <form name="dpublisher" action="/adm/pubdir" target="LONCAPAToBePublished" method="post">
 		      <input type="hidden" name="filename" value="" />
-		      <input type="button" value="$lt{'list'}" onclick="getdfilename();" />
+		      <input type="button" value="$html_lt{'list'}" onclick="getdfilename();" />
 		    </form>
 		  </td>
 		  <td bgcolor="#ccddaa" valign="top" align="center">
@@ -270,7 +274,7 @@ END
 			method="post" enctype="multipart/form-data">
 		      <input type="hidden" name="filename" value="" />
 		      <input type="file" name="upfile" size="20" />
-		      <input type="button" value="$lt{'uplo'}"  onclick="getufilename();" />
+		      <input type="button" value="$html_lt{'uplo'}"  onclick="getufilename();" />
 		    </form>
 		  </td>
 		  <td rowspan="2" bgcolor="#ccddaa" align="center">
@@ -278,7 +282,7 @@ END
 		      <input type="hidden" name="postdata" value="" />
 		      <input type="hidden" name="curseed" value="" />
 		      <input type="hidden" name="problemtype" value="" />
-		      <input type="button" value="$lt{'prnt'}" onclick="getpostdata();" />
+		      <input type="button" value="$html_lt{'prnt'}" onclick="getpostdata();" />
 		    </form>
 		  </td>
 		</tr>
@@ -291,13 +295,13 @@ ENDTWO
                       <input type="hidden" name="filename" value="" />
                       <input type="hidden" name="forcerepub" value="NO" />
                       <input type="hidden" name="pubrec" value="1" />
-                      <input type="button" value="$lt{'pubs'}" onclick="getsubdirname();" />
+                      <input type="button" value="$html_lt{'pubs'}" onclick="getsubdirname();" />
                     </form>
                   </td>
                   <td bgcolor="#ccddaa">
                     <form name="editcat" action="/adm/cfile" target="_parent" method="post">
                       <input type="hidden" name="filename" value="" />
-                      <input type="button" value="$lt{'edit'}" onclick="geteditcat();" />
+                      <input type="button" value="$html_lt{'edit'}" onclick="geteditcat();" />
                     </form>
                   </td>
 ENDDIR
@@ -306,14 +310,14 @@ ENDDIR
 		  <td bgcolor="#ccddaa" align="center">
 		    <form name="rpublisher" action="/adm/retrieve" target="_parent" method="post">
 		      <input type="hidden" name="filename" value="" />
-		      <input type="button" value="$lt{'rtrv'}" onclick="getrfilename();" />
+		      <input type="button" value="$html_lt{'rtrv'}" onclick="getrfilename();" />
 		    </form>
 		  </td>
 		  <td bgcolor="#ccddaa">
 		    <form name="del" action="/adm/cfile" target="_parent" method="post">
 		      <input type="hidden" name="filename" value="" />
 		      <input type="hidden" name="action" value="delete" />
-	              <input type="button" value="$lt{'dele'}" onclick="getdelfilename();" />
+	              <input type="button" value="$html_lt{'dele'}" onclick="getdelfilename();" />
 		    </form>
 		  </td>
 ENDFILE
@@ -324,26 +328,26 @@ ENDFILE
 		      <nobr>
 			<input type="hidden" name="filename" value="" />
 			  <select name="action">
-			    <option value="Select Action">$lt{'sela'}</option>
-			    <option value="newfile">$lt{'nfil'}:</option>
-			    <option value="newhtmlfile">$lt{'nhtm'}:</option>
-			    <option value="newproblemfile">$lt{'nprb'}:</option>
-                            <option value="newpagefile">$lt{'npag'}:</option>
-                            <option value="newsequencefile">$lt{'nseq'}:</option>
-                            <option value="newrightsfile">$lt{'ncrf'}:</option>
-                            <option value="newstyfile">$lt{'nsty'}:</option>
-                            <option value="newlibraryfile">$lt{'nlib'}:</option>
-			    <option value="newdir">$lt{'nsub'}:</option>
+			    <option value="Select Action">$html_lt{'sela'}</option>
+			    <option value="newfile">$html_lt{'nfil'}:</option>
+			    <option value="newhtmlfile">$html_lt{'nhtm'}:</option>
+			    <option value="newproblemfile">$html_lt{'nprb'}:</option>
+                            <option value="newpagefile">$html_lt{'npag'}:</option>
+                            <option value="newsequencefile">$html_lt{'nseq'}:</option>
+                            <option value="newrightsfile">$html_lt{'ncrf'}:</option>
+                            <option value="newstyfile">$html_lt{'nsty'}:</option>
+                            <option value="newlibraryfile">$html_lt{'nlib'}:</option>
+			    <option value="newdir">$html_lt{'nsub'}:</option>
 ENDOPTIONS
     if ($disp ne 'dir') {
         $r->print(<<"ENDPROBOPS");
-			    <option value="rename">$lt{'renm'}:</option>
-			    <option value="move">$lt{'move'}:</option>
-			    <option value="copy">$lt{'copy'}:</option>
+			    <option value="rename">$html_lt{'renm'}:</option>
+			    <option value="move">$html_lt{'move'}:</option>
+			    <option value="copy">$html_lt{'copy'}:</option>
 ENDPROBOPS
     }
     $r->print(<<"ENDPAGE");
-			  </select>&nbsp;<input type="text" name="newfilename" value="$lt{'type'}" onfocus="if (this.value == '$lt{'type'}') this.value=''" />&nbsp;<input type="button" value="$lt{'go'}" onclick="getactionfilename();" />
+			  </select>&nbsp;<input type="text" name="newfilename" value="$html_lt{'type'}" onfocus="if (this.value == '$html_lt{'type'}') this.value=''" />&nbsp;<input type="button" value="$html_lt{'go'}" onclick="getactionfilename();" />
 		      </nobr>
 		    </form>
 		   </td>