Chris 98901d27be Bug 14423: XSS in authorities-home ... To test: 1/ Hit a url like http://localhost:8081/cgi-bin/koha/authorities/authorities-home.pl?op=do_search&type=intranet&marclist=mainentry&and_or=and&operator=contains&value=%22/%3E%3Cscript%3Ealert%28%27oh%20noes%27%29%3C/script%3E 2/ Notice you get 3 alert boxes 3/ Apply patch 4/ Hit the url again, no js Signed-off-by: Jonathan Druart <jonathan.druart@koha-community.org> Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>		2015-06-23 10:11:49 -03:00
..
css	Bug 10172: Hide some uneeded stuffs on printing a record	2015-06-22 11:10:06 -03:00
data	Bug 11695 - Fixed typo in marc21_field_008.xml	2014-03-11 14:21:23 +00:00
includes	Bug 14423: XSS in authorities-home	2015-06-23 10:11:49 -03:00
js	Bug 14327: Fix js error "TypeError: events is null" in additem.js	2015-06-07 18:40:12 -03:00
lib/yui	Bug 13139 - Move treeview jQuery plugin outside of language-specific directory	2014-10-27 12:36:53 -03:00
modules	Bug 14356: Improvements to the 'Transfers to receive' page	2015-06-22 17:30:53 -03:00
xslt	Bug 14094: DDC - Add separators for repeated $a subfields (MARC21)	2015-06-22 11:48:18 -03:00
columns.def	Bug 14130: Update columns.def	2015-05-22 17:02:21 -03:00