13e65432ce
In preparation:
Make sure you enter <script>alert("sth")</script>
in all fields of a new vendor that are not validated
and save.
1) Access vendor summary page.
2) Verify scripts are executed
3) Apply patch
4) Verify scripts are on longer executed
This works in combination with the other patches for XSS
on this bug.
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
|
||
|---|---|---|
| .. | ||
| csv | ||
| tables | ||
| acqui-home.tt | ||
| addorder.tt | ||
| addorderiso2709.tt | ||
| ajax.tt | ||
| basket.tt | ||
| basketgroup.tt | ||
| basketheader.tt | ||
| booksellers.tt | ||
| cancelorder.tt | ||
| edi_ean.tt | ||
| edifactmsgs.tt | ||
| edimsg.tt | ||
| histsearch.tt | ||
| invoice-files.tt | ||
| invoice.tt | ||
| invoices.tt | ||
| lateorders.tt | ||
| modordernotes.tt | ||
| neworderbiblio.tt | ||
| neworderempty.tt | ||
| neworderempty_duplicate.tt | ||
| newordersubscription.tt | ||
| newordersuggestion.tt | ||
| ordered.tt | ||
| orderreceive.tt | ||
| parcel.tt | ||
| parcels.tt | ||
| spent.tt | ||
| supplier.tt | ||
| transferorder.tt | ||
| uncertainprice.tt | ||
| z3950_search.tt | ||