Amit Gupta c57d0b71c7 Bug 19050 - XSS Flaws in Quick spine label creator ... 1. Hit /cgi-bin/koha/labels/spinelabel-home.pl 2. Enter <IFRAME SRC="javascript:alert('XSS');"></IFRAME> barcode text box. 3. Notice the iframe is executed 4. Apply patch 5. Reload page, and enter iframe again on barcode text box. 6. Notice it is no longer executed Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz> Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>		2017-08-29 12:00:37 -03:00
..
label-bib-search.tt
label-edit-batch.tt
label-edit-layout.tt
label-edit-profile.tt
label-edit-template.tt
label-home.tt	Bug 16241 - Move staff client CSS out of language directory	2016-04-29 13:54:37 +00:00
label-manage.tt
label-print.tt	Bug 16576 [Revised] Remove the use of "onclick" from label templates	2016-09-09 12:11:21 +00:00
result.tt
search.tt
spinelabel-home.tt
spinelabel-print.tt