Koha/koha-tmpl/opac-tmpl/bootstrap
Chris Cormack 45dd775401 Bug 14418: XSS Vulnerabilities in OPAC search
Fix for /cgi-bin/koha/opac-search.pl

To test

1/ Hit /cgi-bin/koha/opac-search.pl?tag="><script
src='http://cst.sba-research.org/x.js'/>&q=a
2/ Notice the js is executed
3/ Apply patch
4/ Reload page, notice it is no longer executed
5/ Test the rss links work still

Signed-off-by: Jonathan Druart <jonathan.druart@koha-community.org>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
Confirmed bug and that the patch fixes it.
Signed-off-by: Tomas Cohen Arazi <tomascohen@unc.edu.ar>
2015-06-22 11:00:10 -03:00
..
css Bug 11574 - Clean up Printing Lists 2015-05-05 15:41:27 -03:00
en Bug 14418: XSS Vulnerabilities in OPAC search 2015-06-22 11:00:10 -03:00
images
itemtypeimg
js Bug 9580 Cover images from Coce, a remote image URL cache 2015-04-01 09:31:42 -03:00
less Bug 11574 - Clean up Printing Lists 2015-05-05 15:41:27 -03:00
lib Bug 13307: Fix jquery.deseriable.min.js 2015-04-13 13:48:55 -03:00