Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity
Koha/koha-tmpl/intranet-tmpl/prog/en/modules/circ
History
Jonathan Druart 96a9c2715e Bug 17036: Fix XSS in circulation.pl 
Test plan:
Enter the following in the "Check out" tab:
"><script>alert('XSS')</script>

=> Without this patch you will see the alert
=> With this patch, no more alert

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>

Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
2016-08-10 13:20:07 +00:00
..
bookcount.tt Bug 15927 - Remove use of <tr class="highlight"> for alternating row colors 2016-03-02 22:07:13 +00:00
branchoverdues.tt
branchtransfers.tt Bug 17022: Fix XSS in circ/branchtransfers.pl 2016-08-04 19:19:23 +00:00
circulation-home.tt Bug 16225 - Extra closing quote in circulation home page template 2016-04-22 23:02:02 +00:00
circulation.tt Bug 17036: Fix XSS in circulation.pl 2016-08-10 13:20:07 +00:00
circulation_batch_checkouts.tt Bug 6906: Add the warning message to the batch checkout 2016-07-08 13:40:28 +00:00
offline-mf.tt Bug 16242 - Move staff client JavaScript out of language directory 2016-04-29 14:32:42 +00:00
offline.tt Bug 16242 [Follow-up] Move staff client JavaScript out of language directory 2016-04-29 14:32:42 +00:00
on-site_checkouts.tt Bug 16241 - Move staff client CSS out of language directory 2016-04-29 13:54:37 +00:00
overdue.tt Bug 16531: Circ overdue report is showing an empty table if no overdues 2016-07-15 18:04:57 +00:00
pendingreserves.tt Bug 16241 - Move staff client CSS out of language directory 2016-04-29 13:54:37 +00:00
printslip.tt Bug 16218: printfeercpt.tt (and others) does not include jQuery 2016-04-29 14:14:54 +00:00
renew.tt Bug 15821: Use Font Awesome icons in confirmation dialogs - Circulation 2016-03-02 03:52:01 +00:00
reserveratios.tt Bug 16241 - Move staff client CSS out of language directory 2016-04-29 13:54:37 +00:00
returns.tt Bug 17021: Fix XSS in circ/returns.pl 2016-08-10 13:18:54 +00:00
selectbranchprinter.tt
transfer-slip.tt
transferstoreceive.tt Bug 16774: Format date on 'Transfers to receive' page to dateformat system preference 2016-07-08 13:04:36 +00:00
view_holdsqueue.tt Bug 16241 - Move staff client CSS out of language directory 2016-04-29 13:54:37 +00:00
waitingreserves.tt Bug 16241 - Move staff client CSS out of language directory 2016-04-29 13:54:37 +00:00