Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity
Koha/members
History
Jonathan Druart 4e40339db3 Bug 17830: CSRF - Handle unicode characters in userid 
If the userid of the logged in user contains unicode characters, the token
will not be generated correctly and Koha will crash with:
  Wide character in subroutine entry at /usr/share/perl5/Digest/HMAC.pm line 63.

Test plan:
- Edit a superlibrarian user and set his/her userid to '❤' or any other strings
with unicode characters.
- Login using this patron
- Search for patrons and click on a result.

=> Without this patch, you will get a software error (with "Wide
character in subroutine entry" in the logs).
=> With this patch, everything will go fine

You can also test the other files modified by this patch.

Signed-off-by: Karam Qubsi <karamqubsi@gmail.com>

Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
2016-12-30 17:47:18 +00:00
..
boraccount.pl Bug 15758: Koha::Libraries - Ultimate duel for C4::Branch 2016-09-08 14:36:04 +00:00
default_messageprefs.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
deletemem.pl Bug 17830: CSRF - Handle unicode characters in userid 2016-12-30 17:47:18 +00:00
discharge.pl Bug 15823: Can still access patron discharge slip without having the syspref on 2016-05-06 04:20:48 +00:00
discharges.pl Bug 15548: Move new patron related code to Patron* 2016-03-03 14:38:26 -07:00
files.pl Bug 15758: Koha::Libraries - Ultimate duel for C4::Branch 2016-09-08 14:36:04 +00:00
guarantor_search.pl Bug 15758: Koha::Libraries - Remove GetBranches 2016-09-08 14:36:03 +00:00
housebound.pl Bug 5670: remove useless call to ->new when ->search is enought 2016-10-21 18:18:02 +00:00
mancredit.pl Bug 15758: Koha::Libraries - Ultimate duel for C4::Branch 2016-09-08 14:36:04 +00:00
maninvoice.pl Bug 15758: Koha::Libraries - Ultimate duel for C4::Branch 2016-09-08 14:36:04 +00:00
member-flags.pl Bug 17578: GetMemberDetails - Remove flags 2016-12-16 13:12:42 +00:00
member-password.pl Bug 17830: CSRF - Handle unicode characters in userid 2016-12-30 17:47:18 +00:00
member.pl Bug 17375: Search by dateofbirth - handle invalid dates 2016-10-27 13:18:32 +00:00
memberentry.pl Bug 17830: CSRF - Handle unicode characters in userid 2016-12-30 17:47:18 +00:00
members-home.pl Bug 15758: Koha::Libraries - Remove GetBranchesLoop 2016-09-08 14:36:02 +00:00
members-update-do.pl Bug 15758: Koha::Libraries - Ultimate duel for C4::Branch 2016-09-08 14:36:04 +00:00
members-update.pl Bug 15758: Koha::Libraries - Ultimate duel for C4::Branch 2016-09-08 14:36:04 +00:00
mod_debarment.pl Bug 16154: CGI->multi_param - Force scalar context 2016-04-26 23:16:43 +00:00
moremember.pl Bug 17830: CSRF - Handle unicode characters in userid 2016-12-30 17:47:18 +00:00
nl-search.pl Bug 15407: Koha::Patron::Categories - replace C4::Category->all 2016-09-08 13:29:03 +00:00
notices.pl Bug 15758: Koha::Libraries - Remove GetBranchName 2016-09-08 14:36:01 +00:00
patronimage.pl Bug 17423 - patronimage.pl permission is too restrictive 2016-10-17 23:44:25 +00:00
pay.pl Bug 11217: The # in accountlines descriptions makes them un-writeoffable 2016-10-11 16:23:06 +00:00
paycollect.pl Bug 15896: [QA Follow-up] Add accountlines_id parameter in paycollect 2016-12-09 17:53:07 +00:00
print_overdues.pl Bug 12933: (QA followup) Rename GetOverdues to GetOverduesForPatron 2015-11-04 12:41:29 -03:00
printfeercpt.pl Bug 17154 : Note column is missing on account lines receipt 2016-10-21 15:12:21 +00:00
printinvoice.pl Bug 17154 : Note column is missing on account lines receipt 2016-10-21 15:12:21 +00:00
printslip.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
purchase-suggestions.pl Bug 17578: GetMemberDetails - Remove GetMemberDetails 2016-12-16 13:12:44 +00:00
readingrec.pl Bug 15758: Koha::Libraries - Remove GetBranches 2016-09-08 14:36:03 +00:00
routing-lists.pl Bug 17578: GetMemberDetails - Remove GetMemberDetails 2016-12-16 13:12:44 +00:00
setstatus.pl Bug 16911: Rename extend_subscription with renew_account 2016-09-09 09:45:32 +00:00
statistics.pl Bug 17578: GetMemberDetails - Remove GetMemberDetails 2016-12-16 13:12:44 +00:00
summary-print.pl Bug 17128: Make summary-print.pl plack safe 2016-09-02 14:23:16 +00:00
update-child.pl Bug 15407: Koha::Patron::Categories - replace GetborCatFromCatType 2016-09-08 13:29:22 +00:00