Jonathan Druart
9d00353a92
Test plan: Hit: /serials/checkexpiration.pl?title="><script>alert("XSS")</script>&date=12/02/2002 /serials/checkexpiration.pl?issn="><script>alert("XSS")</script>&date=12/02/2002 => Without this patch you will see the alert => With this patch, no more alert Signed-off-by: Chris Cormack <chris@bigballofwax.co.nz> Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Signed-off-by: Brendan Gallagher <brendan@bywatersolutions.com> |
||
---|---|---|
.. | ||
data | ||
includes | ||
js | ||
modules | ||
xslt | ||
columns.def |