diff --git a/app/templates/v2/screens/merkliste.html b/app/templates/v2/screens/merkliste.html index 1619292..9acb561 100644 --- a/app/templates/v2/screens/merkliste.html +++ b/app/templates/v2/screens/merkliste.html @@ -201,7 +201,10 @@ try { var r = await fetch('/api/me/merkliste/' + encodeURIComponent(antragId), { method: 'DELETE' }); if (r.ok) { - var el = document.getElementById('merkliste-row-' + CSS.escape(antragId)); + // Row-ID wird via escAttr gebildet (alphanumerisch + Unterstrich) — + // gleiche Sanitization für den Lookup, sonst findet getElementById nichts. + var rowId = 'merkliste-row-' + String(antragId || '').replace(/[^a-zA-Z0-9_-]/g, '_'); + var el = document.getElementById(rowId); if (el) el.remove(); if (!resultsEl.querySelectorAll('.merkliste-entry').length) { emptyEl.style.display = '';