Revert "Bug 31219: Prevent JS injection in patron extended attributes"

This reverts commit ddaa78bdab.

Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
This commit is contained in:
Lucas Gass 2022-09-28 14:48:14 +00:00
parent 9e1f020b56
commit dd958e6248

View file

@ -739,7 +739,6 @@ sub ParsePatronAttributes {
my $delete_candidates = {};
my $scrubber = C4::Scrubber->new();
while ( my ( $code, $value ) = $ea->() ) {
if ( any { $_ eq $code } @editable_attribute_types ) {
# It is an editable attribute
@ -749,7 +748,7 @@ sub ParsePatronAttributes {
}
else {
# we've got a value
push @attributes, { code => $code, attribute => $scrubber->scrub( $value ) };
push @attributes, { code => $code, attribute => $value };
# 'code' is no longer a delete candidate
delete $delete_candidates->{$code}