Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity

Bug 26102: Prevent XSS when To.json is used: authorities/authorities.tt

Browse source 
Check that mandatory tags and subfields are correctly required when
editing an authority record.

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
This commit is contained in:
Owen Leonard 2020-08-11 12:34:18 +00:00 committed by Fridolin Somers
parent 97bcf926da
commit bd87a31936
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
koha-tmpl/intranet-tmpl/prog/en/modules/authorities/authorities.tt
View file

@ -79,7 +79,7 @@ function AreMandatoriesNotOk(){
[% FOREACH subfield_loo IN innerloo.subfield_loop %]
[% IF ( subfield_loo.mandatory ) %]mandatories.push("[% subfield_loo.id | html %]");
tab.push("[% BIG_LOO.number | html %]");
label.push("[% To.json(subfield_loo.marc_lib) | $raw %]");
label.push("[% To.json(subfield_loo.marc_lib) | html %]");
[% END %]
[% END %]
[% END %]