From a09a29fa6ac4f04a8d66ac683762fd8c331ed163 Mon Sep 17 00:00:00 2001
From: Laurent Destailleur <eldy@destailleur.fr>
Date: Mon, 24 Apr 2023 17:55:54 +0200
Subject: [PATCH] Code comment

---
 htdocs/core/lib/functions.lib.php | 2 +-
 htdocs/product/reassortlot.php    | 9 +++++----
 2 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/htdocs/core/lib/functions.lib.php b/htdocs/core/lib/functions.lib.php
index b770c71f839..a5555f6d7a3 100644
--- a/htdocs/core/lib/functions.lib.php
+++ b/htdocs/core/lib/functions.lib.php
@@ -1537,7 +1537,7 @@ function dol_escape_json($stringtoescape)
 }
 
 /**
- *  Returns text escaped for inclusion in HTML alt or title tags, or into values of HTML input fields.
+ *  Returns text escaped for inclusion in HTML alt or title or value tags, or into values of HTML input fields.
  *
  *  @param      string		$stringtoescape			String to escape
  *  @param		int			$keepb					1=Keep b tags, 0=remove them completely
diff --git a/htdocs/product/reassortlot.php b/htdocs/product/reassortlot.php
index 8c655df44ff..d9506b390a5 100644
--- a/htdocs/product/reassortlot.php
+++ b/htdocs/product/reassortlot.php
@@ -584,18 +584,19 @@ if (!empty($conf->global->MAIN_CHECKBOX_LEFT_COLUMN)) {
 	print '</td>';
 }
 print '<td class="liste_titre">';
-print '<input class="flat" type="text" name="sref" size="6" value="'.$sref.'">';
+print '<input class="flat" type="text" name="sref" size="6" value="'.dol_escape_htmltag($sref).'">';
 print '</td>';
 print '<td class="liste_titre">';
-print '<input class="flat" type="text" name="snom" size="8" value="'.$snom.'">';
+print '<input class="flat" type="text" name="snom" size="8" value="'.dol_escape_htmltag($snom).'">';
 print '</td>';
 if (isModEnabled("service") && $type == 1) {
 	print '<td class="liste_titre">';
 	print '&nbsp;';
 	print '</td>';
 }
-print '<td class="liste_titre"><input class="flat" type="text" name="search_warehouse" size="6" value="'.$search_warehouse.'"></td>';
-print '<td class="liste_titre center"><input class="flat" type="text" name="search_batch" size="6" value="'.$search_batch.'"></td>';
+
+print '<td class="liste_titre"><input class="flat" type="text" name="search_warehouse" size="6" value="'.dol_escape_htmltag($search_warehouse).'"></td>';
+print '<td class="liste_titre center"><input class="flat" type="text" name="search_batch" size="6" value="'.dol_escape_htmltag($search_batch).'"></td>';
 if (empty($conf->global->PRODUCT_DISABLE_SELLBY)) {
 	print '<td class="liste_titre center">';
 	$key = 'sellby';