Koha/koha-tmpl
Amit Gupta e0dd566634 Bug 19034: XSS Flaws in Patron categories pages
1. Hit /cgi-bin/koha/admin/categories.pl
2. Enter <IFRAME SRC="javascript:alert('XSS');"></IFRAME> search patron categories box.
3. Notice the iframe is executed.
4. Apply patch.
5. Reload page, and enter iframe again on search patron categories box.
6. Notice it is no longer executed.

Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
2017-08-29 12:00:37 -03:00
..
intranet-tmpl Bug 19034: XSS Flaws in Patron categories pages 2017-08-29 12:00:37 -03:00
opac-tmpl Bug 18726: Fix XSS at the OPAC - biblionumber 2017-08-29 12:00:37 -03:00
favicon.ico
index.html
intranet.html
opac.html