Koha/koha-tmpl/opac-tmpl/bootstrap
Kyle M Hall 950fc8e101 Bug 19319: Reflected XSS Vulnerability in opac-MARCdetail.pl
Try going to this URL on your site: /cgi-bin/koha/opac-MARCdetail.pl?biblionumber=2"><TEST>

Test Plan:
1) Go to /cgi-bin/koha/opac-MARCdetail.pl?biblionumber=2"><TEST>
2) Note <TEST> is embedded all over the html
3) Apply this patch
4) Refresh the page, note the injection is gone!
5) run koha qa test tools

Signed-off-by: Mark Tompsett <mtompset@hotmail.com>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
2018-01-09 16:02:25 -03:00
..
css Bug 7317: opac.css update 2017-11-09 11:42:14 -03:00
en Bug 19319: Reflected XSS Vulnerability in opac-MARCdetail.pl 2018-01-09 16:02:25 -03:00
images
itemtypeimg
js Bug 19702: Correct cookie path in Basket.js 2017-12-22 13:15:37 -03:00
less Bug 7317: Interlibrary loans framework for Koha. 2017-11-09 11:42:12 -03:00
lib Bug 13696: Add support for Font Awesome icons in Koha 2015-10-27 09:57:23 -03:00