Koha/koha-tmpl/intranet-tmpl
Amit Gupta b90662073f Bug 19127: Fix Stored XSS in csv-profiles.pl
To Test
1. Hit the page /cgi-bin/koha/tools/csv-profiles.pl?op=add_form
2. Add a text in the field Profile name, Profile description
   and Profile MARC fields that contains js
3. Save the page.
4. Notice js is execute
5. Apply patch and reload, the js is escaped

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
2017-09-29 12:20:51 -03:00
..
js Bug 16456: Add Font Awesome icons to some buttons in Tools module, section Patrons and circulation 2016-06-17 15:40:24 +00:00
lib Bug 18810: Update Font Awesome to 4.7.0 2017-09-19 09:22:45 -03:00
prog Bug 19127: Fix Stored XSS in csv-profiles.pl 2017-09-29 12:20:51 -03:00