Revert "Bug 31219: Prevent JS injection in patron extended attributes"
This reverts commit ddaa78bdab
.
Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
This commit is contained in:
parent
9e1f020b56
commit
dd958e6248
1 changed files with 1 additions and 2 deletions
|
@ -739,7 +739,6 @@ sub ParsePatronAttributes {
|
|||
|
||||
my $delete_candidates = {};
|
||||
|
||||
my $scrubber = C4::Scrubber->new();
|
||||
while ( my ( $code, $value ) = $ea->() ) {
|
||||
if ( any { $_ eq $code } @editable_attribute_types ) {
|
||||
# It is an editable attribute
|
||||
|
@ -749,7 +748,7 @@ sub ParsePatronAttributes {
|
|||
}
|
||||
else {
|
||||
# we've got a value
|
||||
push @attributes, { code => $code, attribute => $scrubber->scrub( $value ) };
|
||||
push @attributes, { code => $code, attribute => $value };
|
||||
|
||||
# 'code' is no longer a delete candidate
|
||||
delete $delete_candidates->{$code}
|
||||
|
|
Loading…
Reference in a new issue