From 8a16c7e37fd5905cf5dddacfaa682da14a9a5193 Mon Sep 17 00:00:00 2001
From: j <j@mailb.org>
Date: Wed, 15 Sep 2021 14:05:11 +0200
Subject: [PATCH] escape & too

---
 pandora/edit/models.py        | 1 +
 static/js/documentInfoView.js | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/pandora/edit/models.py b/pandora/edit/models.py
index 86fdc1083..907dc579b 100644
--- a/pandora/edit/models.py
+++ b/pandora/edit/models.py
@@ -13,6 +13,7 @@ from django.conf import settings
 from django.db import models, transaction
 from django.db.models import Max
 from django.contrib.auth import get_user_model
+from django.core.cache import cache
 
 from oxdjango.fields import JSONField
 
diff --git a/static/js/documentInfoView.js b/static/js/documentInfoView.js
index f8ebe3336..11fc40af7 100644
--- a/static/js/documentInfoView.js
+++ b/static/js/documentInfoView.js
@@ -429,7 +429,7 @@ pandora.ui.documentInfoView = function(data, isMixed) {
     function formatLink(value, key) {
         return (Ox.isArray(value) ? value : [value]).map(function(value) {
             return key
-                ? '<a href="/documents/' + key + '=' + value + '">' + value + '</a>'
+                ? '<a href="/documents/' + key + '=' + pandora.escapeQueryValue(value) + '">' + value + '</a>'
                 : value;
         }).join(', ');
     }