Chris 98901d27be Bug 14423: XSS in authorities-home ... To test: 1/ Hit a url like http://localhost:8081/cgi-bin/koha/authorities/authorities-home.pl?op=do_search&type=intranet&marclist=mainentry&and_or=and&operator=contains&value=%22/%3E%3Cscript%3Ealert%28%27oh%20noes%27%29%3C/script%3E 2/ Notice you get 3 alert boxes 3/ Apply patch 4/ Hit the url again, no js Signed-off-by: Jonathan Druart <jonathan.druart@koha-community.org> Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>		2015-06-23 10:11:49 -03:00
..
intranet-tmpl	Bug 14423: XSS in authorities-home	2015-06-23 10:11:49 -03:00
opac-tmpl	Bug 5025: discrepancy between opac doc-head-open.inc and staff doc-head-open.inc	2015-06-22 17:04:48 -03:00
favicon.ico
index.html
intranet.html
opac.html