Koha/koha-tmpl/intranet-tmpl/prog/en/modules/members
Katrin Fischer 2d30845601 Bug 19125: Fix Stored XSS in members.pl
In preparation to test this patch:
- Add a patron list named <script>alert("patron list")</script>
- Add a library named <script>alert("library")</script>
- Add a patron category named <script>alert("patron category")</script>

To test:
- Access patron search page and do a search
- Verify that the alerts added above are executed
- Apply patch
- Verify that no alerts are displayed

Signed-off-by: Amit Gupta <amit.gupta@informaticsglobal.com>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
2017-09-29 12:20:45 -03:00
..
tables
boraccount.tt Bug 18263: Make use of syspref 'CurrencyFormat' for Account and Pay fines tables 2017-03-31 13:47:41 +00:00
deletemem.tt
discharge.tt
discharges.tt
files.tt Bug 18656 - Require confirmation of deletion of files from patron record 2017-06-12 11:11:13 -03:00
housebound.tt Bug 17847: Replace C4::Koha::GetAuthvalueDropbox with Koha::AuthorisedValues 2017-03-31 10:12:37 +00:00
mancredit.tt
maninvoice.tt Bug 17014: Simplify some code 2017-03-31 14:33:52 +00:00
member-flags.tt
member-password.tt
member.tt Bug 19125: Fix Stored XSS in members.pl 2017-09-29 12:20:45 -03:00
memberentrygen.tt Bug 18621: Added in value attribute to dateexpiry field 2017-09-01 13:02:24 -03:00
members-update.tt Bug 18703 - Translatability: Resolve some remaining %%] problems for staff client in 6 Files 2017-06-16 17:04:08 -03:00
moremember-brief.tt Bug 19129 - Follow-up - Add changes to patron duplicate warning 2017-09-01 13:02:23 -03:00
moremember-print.tt Bug 17014 - Remove more event attributes from patron templates 2017-03-31 14:33:51 +00:00
moremember-receipt.tt Bug 17014 - Remove more event attributes from patron templates 2017-03-31 14:33:51 +00:00
moremember.tt Bug 19129 - Clean up Details tab for Organisation patrons 2017-09-01 13:02:23 -03:00
nl-search.tt
notices.tt Bug 18439 - Resend button for notices being hidden by CSS and never unhidden 2017-04-21 07:32:23 -04:00
pay.tt Bug 18263: Make use of syspref 'CurrencyFormat' for Account and Pay fines tables 2017-03-31 13:47:41 +00:00
paycollect.tt Bug 19208 - Pay select option doesn't pay the selected fine 2017-09-01 13:00:04 -03:00
printfeercpt.tt Bug 17014 - Remove more event attributes from patron templates 2017-03-31 14:33:51 +00:00
printinvoice.tt Bug 17014 - Remove more event attributes from patron templates 2017-03-31 14:33:51 +00:00
purchase-suggestions.tt
readingrec.tt
routing-lists.tt
statistics.tt Bug 19080: Handle non-existing patrons gratefully 2017-08-25 11:03:37 -03:00
update-child.tt