Koha/koha-tmpl/intranet-tmpl/prog/en
Jonathan Druart 9d00353a92 Bug 17026: Fix XSS in serials/checkexpiration.pl
Test plan:
Hit:
 /serials/checkexpiration.pl?title="><script>alert("XSS")</script>&date=12/02/2002
 /serials/checkexpiration.pl?issn="><script>alert("XSS")</script>&date=12/02/2002

=> Without this patch you will see the alert
=> With this patch, no more alert

Signed-off-by: Chris Cormack <chris@bigballofwax.co.nz>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>

Signed-off-by: Brendan Gallagher <brendan@bywatersolutions.com>
2016-08-04 18:13:31 +00:00
..
data Bug 16608 - Missing entity nbsp in some XML files 2016-06-10 17:40:55 +00:00
includes Bug 15974: Rancor: Correctly select existing authorized value 2016-07-22 17:09:01 +00:00
js Bug 16795 - Patron categories: Accept integers only for enrolment period and age limits 2016-07-08 13:15:31 +00:00
modules Bug 17026: Fix XSS in serials/checkexpiration.pl 2016-08-04 18:13:31 +00:00
xslt Bug 16608 - Missing entity nbsp in some XML files 2016-06-10 17:40:55 +00:00
columns.def Bug 15373: More changes of Zip to ZIP on intranet 2015-12-30 16:30:35 +00:00