Fix(web): Escape attributes values and texts

[m_librarian.git] / m_librarian / web / views / list_authors.tmpl

diff --git a/m_librarian/web/views/list_authors.tmpl b/m_librarian/web/views/list_authors.tmpl
index b0b20ad08d4e22e6f316bab92da85381f38ded23..f7377ba29c5fc835f717d06f8e561fe17883eca1 100644 (file)
--- a/m_librarian/web/views/list_authors.tmpl
+++ b/m_librarian/web/views/list_authors.tmpl
@@ -2,13 +2,17 @@
 #extends views.layout
 #attr $title = 'Список авторов'
 #def body
+<h1>Поиск авторов</h1>
+#from views.search_authors_form import search_authors_form
+$search_authors_form(searchList=$searchList)
+
 <h1>$title</h1>
 
 #if $authors
   <table>
   #for $author in $authors
   <tr>
-    <td>$author.fullname</td>
+    <td><a href="/books-by-author/$author.id/">$author.fullname</a></td>
   </tr>
   #end for
   </table>