Marcel de Rooy 4c3a6c3910 Bug 36875: Do not pass unsanitized language to $page->translated_content ... Test plan: Try to access opac-page.pl with a language not in OPACLanguages. Verify that this 'language' was not passed to sql. Simplest perhaps by debugging AdditionalContent.pm. Something like: sub translated_content { my ( $self, $lang ) = @_; +warn "L137: $lang"; Now have a public additional_contents page and hit it: /cgi-bin/koha/opac-page.pl?page_id=5&language=badsql Check your log and find: [2024/05/16 07:25:53] [WARN] L137: en at [etc] line 137. So badsql was caught. Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: Victor Grousset/tuxayo <victor@tuxayo.net> Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com> Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>		2024-06-20 17:55:37 +02:00
..
clubs
errors	Bug 36148: Improve error handling and restore programming errors	2024-03-01 11:01:06 +01:00
external/overdrive
sci	Bug 34478: Changes for opac/sci/sci-main	2024-03-01 10:57:38 +01:00
sco	Bug 36679: Prevent SCO login for the AnonymousPatron	2024-06-10 16:20:58 +01:00
svc	Bug 36418: opac/svc/club: switch content-type to application/json	2024-04-02 17:59:05 +02:00
ilsdi.pl	Bug 36367: Remove _new_userenv	2024-06-14 11:17:17 +01:00
maintenance.pl
oai.pl
opac-account-pay-return.pl
opac-account-pay.pl	Bug 36088: Remove useless code form opac-account-pay.pl	2024-03-07 15:02:43 +01:00
opac-account.pl
opac-addbybiblionumber.pl	Bug 34478: Changes for opac-addbybiblionumber	2024-03-01 10:57:37 +01:00
opac-alert-subscribe.pl
opac-alert-subscriptions.pl
opac-article-request-cancel.pl
opac-authorities-home.pl
opac-authoritiesdetail.pl	Bug 29948: OPACAuthorIdentifiersAndInformation	2024-05-13 14:00:10 +02:00
opac-basket.pl
opac-blocked.pl	Bug 35952: Remove unnecessary line for OpacSuppressionMessage	2024-03-07 15:02:50 +01:00
opac-browse.pl
opac-browser.pl
opac-changelanguage.pl
opac-course-details.pl
opac-course-reserves.pl
opac-curbside-pickups.pl
opac-detail.pl	Bug 29948: OPACAuthorIdentifiersAndInformation	2024-05-13 14:00:10 +02:00
opac-discharge.pl
opac-dismiss-message.pl	Bug 36532: Protect opac-dismiss-message.pl from malicious usages	2024-05-14 15:04:34 -03:00
opac-downloadcart.pl
opac-downloadshelf.pl
opac-export.pl
opac-holdshistory.pl
opac-ics.pl
opac-idref.pl
opac-illrequests.pl	Bug 34597: Implementation	2024-06-11 10:43:56 +01:00
opac-image.pl
opac-imageviewer.pl
opac-ISBDdetail.pl	Bug 35961: (follow-up) Pass along the borrowernumber	2024-05-17 10:36:32 +02:00
opac-issue-note.pl
opac-library.pl
opac-main.pl
opac-MARCdetail.pl	Bug 35961: (follow-up) Pass along the borrowernumber	2024-05-17 10:36:32 +02:00
opac-memberentry.pl	Bug 36816: Remove warning	2024-05-24 15:36:45 +02:00
opac-messaging.pl
opac-modrequest-suspend.pl	Bug 34478: Manual fix - add ops - hold-table.inc opac-user.tt	2024-03-01 10:57:21 +01:00
opac-modrequest.pl	Bug 34478: Manual fix - add ops - hold-table.inc opac-user.tt	2024-03-01 10:57:21 +01:00
opac-mymessages.pl
opac-news-rss.pl
opac-overdrive-search.pl
opac-page.pl	Bug 36875: Do not pass unsanitized language to $page->translated_content	2024-06-20 17:55:37 +02:00
opac-passwd.pl
opac-password-recovery.pl	Bug 34478: Changes for opac-password-recovery	2024-03-01 10:57:35 +01:00
opac-patron-consent.pl
opac-patron-image.pl
opac-privacy.pl
opac-ratings.pl
opac-readingrecord.pl
opac-recall.pl	Bug 36142: recallsview template param for opac-recall.tt	2024-04-05 11:51:23 +02:00
opac-recalls.pl
opac-registration-verify.pl
opac-renew.pl	Bug 36453: Update old occurrences of effective_BlockExpiredPatronOpacActions	2024-06-11 09:17:18 +01:00
opac-reportproblem.pl
opac-request-article.pl
opac-reserve.pl	Bug 36453: Update old occurrences of effective_BlockExpiredPatronOpacActions	2024-06-11 09:17:18 +01:00
opac-reset-password.pl
opac-restrictedpage.pl
opac-retrieve-file.pl
opac-review.pl	Bug 34478: Changes for opac-review	2024-03-01 10:57:20 +01:00
opac-routing-lists.pl
opac-search-history.pl
opac-search.pl	Bug 35558: Do not retrieve the local image if none exists - OPAC	2024-04-26 18:06:08 +02:00
opac-sendbasket.pl	Bug 36520: Sanitize input in opac-sendbasket.pl	2024-06-20 17:55:36 +02:00
opac-sendshelf.pl	Bug 34478: Changes for opac-sendshelf	2024-03-01 10:57:25 +01:00
opac-serial-issues.pl
opac-shareshelf.pl	Bug 34478: Changes for opac-shareshelf	2024-03-01 10:59:26 +01:00
opac-shelves.pl	Bug 36858: Remove warnings	2024-05-22 16:18:11 +02:00
opac-showmarc.pl
opac-showreviews.pl
opac-suggestions.pl
opac-tags.pl	Bug 36785: Typo unreconized and bilbio in tags code	2024-05-17 10:36:35 +02:00
opac-tags_subject.pl
opac-topissues.pl	Bug 34478: op =~ ^cud- - Manual - cud-do_it => do_it	2024-03-01 10:58:32 +01:00
opac-user.pl
tracklinks.pl
unapi