Chris Cormack c176b8ceef Bug 19086: Fix Stored XSS in members/member.pl ... To test 1/ hit /cgi-bin/koha/members/member.pl?&searchmember=<script>alert('XSS Payload')</script> 2/ Notice js is executed 3/ Apply patch, reload 4/ js is now escaped Signed-off-by: Amit Gupta <amit.gupta@informaticsglobal.com> Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>		2017-09-29 12:20:44 -03:00
..
tables	Bug 16239: Update templates	2017-01-13 14:41:22 +00:00
boraccount.tt	Bug 18263: Make use of syspref 'CurrencyFormat' for Account and Pay fines tables	2017-03-31 13:47:41 +00:00
deletemem.tt	Bug 17404: Patron deletion page: Fix title and breadcrumb	2016-10-21 15:11:37 +00:00
discharge.tt
discharges.tt
files.tt	Bug 18656 - Require confirmation of deletion of files from patron record	2017-06-12 11:11:13 -03:00
housebound.tt	Bug 17847: Replace C4::Koha::GetAuthvalueDropbox with Koha::AuthorisedValues	2017-03-31 10:12:37 +00:00
mancredit.tt
maninvoice.tt	Bug 17014: Simplify some code	2017-03-31 14:33:52 +00:00
member-flags.tt	Bug 17905: FIX CSRF in member-flags	2017-01-30 11:24:12 +00:00
member-password.tt
member.tt	Bug 19086: Fix Stored XSS in members/member.pl	2017-09-29 12:20:44 -03:00
memberentrygen.tt	Bug 18621: Added in value attribute to dateexpiry field	2017-09-01 13:02:24 -03:00
members-update.tt	Bug 18703 - Translatability: Resolve some remaining %%] problems for staff client in 6 Files	2017-06-16 17:04:08 -03:00
moremember-brief.tt	Bug 19129 - Follow-up - Add changes to patron duplicate warning	2017-09-01 13:02:23 -03:00
moremember-print.tt	Bug 17014 - Remove more event attributes from patron templates	2017-03-31 14:33:51 +00:00
moremember-receipt.tt	Bug 17014 - Remove more event attributes from patron templates	2017-03-31 14:33:51 +00:00
moremember.tt	Bug 19129 - Clean up Details tab for Organisation patrons	2017-09-01 13:02:23 -03:00
nl-search.tt
notices.tt	Bug 18439 - Resend button for notices being hidden by CSS and never unhidden	2017-04-21 07:32:23 -04:00
pay.tt	Bug 18263: Make use of syspref 'CurrencyFormat' for Account and Pay fines tables	2017-03-31 13:47:41 +00:00
paycollect.tt	Bug 19208 - Pay select option doesn't pay the selected fine	2017-09-01 13:00:04 -03:00
printfeercpt.tt	Bug 17014 - Remove more event attributes from patron templates	2017-03-31 14:33:51 +00:00
printinvoice.tt	Bug 17014 - Remove more event attributes from patron templates	2017-03-31 14:33:51 +00:00
purchase-suggestions.tt	Bug 16239: Update templates	2017-01-13 14:41:22 +00:00
readingrec.tt
routing-lists.tt
statistics.tt	Bug 19080: Handle non-existing patrons gratefully	2017-08-25 11:03:37 -03:00
update-child.tt