Koha/koha-tmpl
Amit Gupta 6b3449627f Bug 19105 - XSS Stored in holidays.pl
To Test
1. Hit the page /cgi-bin/koha/tools/holidays.pl
2. Select the date
3. Add a text in the field Title and Description that contains js
4. Save the page.
5. Notice js is execute
6. Apply patch and reload, the js is escaped

Fixed for all holidays

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
2017-08-29 12:00:37 -03:00
..
intranet-tmpl Bug 19105 - XSS Stored in holidays.pl 2017-08-29 12:00:37 -03:00
opac-tmpl Bug 18726: Fix XSS at the OPAC - biblionumber 2017-08-29 12:00:37 -03:00
favicon.ico
index.html
intranet.html
opac.html