Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity
Koha/koha-tmpl/intranet-tmpl/prog/en/modules/circ
History
Jonathan Druart 12b4c83f5a Bug 17021: Fix XSS in circ/returns.pl 
Test plan:
Enter the following in the barcode input:
<script>alert('XSS')</script>

=> Without this patch you will see the alert
=> With this patch, no more alert

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>

Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
2016-08-10 13:18:54 +00:00
..
bookcount.tt Bug 15927 - Remove use of <tr class="highlight"> for alternating row colors 2016-03-02 22:07:13 +00:00
branchoverdues.tt Revert bug 13618 - "Prevent XSS in the Staff Client and the OPAC" due to performance issues 2016-02-11 19:39:53 +00:00
branchtransfers.tt Bug 17022: Fix XSS in circ/branchtransfers.pl 2016-08-04 19:19:23 +00:00
circulation-home.tt Bug 16225 - Extra closing quote in circulation home page template 2016-04-22 23:02:02 +00:00
circulation.tt Bug 16861: (followup)Translatability: remove fa-hand-o-down icon 2016-08-04 21:24:57 +00:00
circulation_batch_checkouts.tt Bug 6906: Add the warning message to the batch checkout 2016-07-08 13:40:28 +00:00
offline-mf.tt Bug 16242 - Move staff client JavaScript out of language directory 2016-04-29 14:32:42 +00:00
offline.tt Bug 16242 [Follow-up] Move staff client JavaScript out of language directory 2016-04-29 14:32:42 +00:00
on-site_checkouts.tt Bug 16241 - Move staff client CSS out of language directory 2016-04-29 13:54:37 +00:00
overdue.tt Bug 16531: Circ overdue report is showing an empty table if no overdues 2016-07-15 18:04:57 +00:00
pendingreserves.tt Bug 16241 - Move staff client CSS out of language directory 2016-04-29 13:54:37 +00:00
printslip.tt Bug 16218: printfeercpt.tt (and others) does not include jQuery 2016-04-29 14:14:54 +00:00
renew.tt Bug 15821: Use Font Awesome icons in confirmation dialogs - Circulation 2016-03-02 03:52:01 +00:00
reserveratios.tt Bug 16241 - Move staff client CSS out of language directory 2016-04-29 13:54:37 +00:00
returns.tt Bug 17021: Fix XSS in circ/returns.pl 2016-08-10 13:18:54 +00:00
selectbranchprinter.tt Revert bug 13618 - "Prevent XSS in the Staff Client and the OPAC" due to performance issues 2016-02-11 19:39:53 +00:00
transfer-slip.tt Revert bug 13618 - "Prevent XSS in the Staff Client and the OPAC" due to performance issues 2016-02-11 19:39:53 +00:00
transferstoreceive.tt Bug 16774: Format date on 'Transfers to receive' page to dateformat system preference 2016-07-08 13:04:36 +00:00
view_holdsqueue.tt Bug 16241 - Move staff client CSS out of language directory 2016-04-29 13:54:37 +00:00
waitingreserves.tt Bug 16241 - Move staff client CSS out of language directory 2016-04-29 13:54:37 +00:00