Chris
3601c6fb1b
1/ hit a url like http://localhost:8081/cgi-bin/koha/acqui/lateorders.pl?delay=<script>alert('oh noes')</script>&estimateddeliverydatefrom 2/ Not you get an alert box 3/ Apply patch notice it is fixed 4/ Test functionality still works Signed-off-by: Jonathan Druart <jonathan.druart@koha-community.org> Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io> |
||
|---|---|---|
| .. | ||
| acqui | ||
| admin | ||
| authorities | ||
| basket | ||
| batch | ||
| catalogue | ||
| cataloguing | ||
| circ | ||
| common | ||
| course_reserves | ||
| errors | ||
| help | ||
| installer | ||
| labels | ||
| members | ||
| offline_circ | ||
| patron_lists | ||
| patroncards | ||
| plugins | ||
| reports | ||
| reserve | ||
| reviews | ||
| rotating_collections | ||
| serials | ||
| services | ||
| sms | ||
| suggestion | ||
| tags | ||
| test | ||
| tools | ||
| virtualshelves | ||
| about.tt | ||
| auth.tt | ||
| intranet-main.tt | ||