Jonathan Druart
66f81fc210
Test plan:
Hit
/cgi-bin/koha/reserve/request.pl?biblionumber=1"><script type="text/javascript">alert("XSS")</script>
=> Without this patch you will see the alert
=> With this patch, no more alert
Signed-off-by: Chris Cormack <chris@bigballofwax.co.nz>
Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Brendan Gallagher <brendan@bywatersolutions.com>
|
||
|---|---|---|
| .. | ||
| modrequest.pl | ||
| modrequest_suspendall.pl | ||
| placerequest.pl | ||
| request.pl | ||