Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity
Koha/acqui
History
Marcel de Rooy fc980aed31 Bug 32457: Fix CGI vulnerability in addorder.pl 
Test plan:
Go to acqui/addorder.pl.
Create two items.
Check if results still match your expectations.

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
(cherry picked from commit b389f9a361)
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
(cherry picked from commit 427d0b32e9)

Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
2023-01-19 23:11:55 +00:00
..
acqui-home.pl Bug 29287: Add child funds to display of parent funds on acqui home 2022-03-01 22:47:46 -10:00
addorder.pl Bug 32457: Fix CGI vulnerability in addorder.pl 2023-01-19 23:11:55 +00:00
addorderiso2709.pl Bug 32167: [22.05.x] (bug 14860 follow-up) Populate price fields even if no discount on vendor 2022-11-23 16:08:56 +00:00
ajax-getauthvaluedropbox.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
basket.pl Bug 31001: Fix "CGI::param called in list context" warning in basket.pl 2022-08-12 15:47:32 +00:00
basketgroup.pl Bug 16258: Add a syspref to govern EDIFACT functionality 2022-04-13 15:55:38 +02:00
basketheader.pl Bug 29859: Use iterator instead of as_list 2022-02-09 15:36:23 -10:00
booksellers.pl Bug 28082: Add acquisitions toolbar to vendors on vendor search page 2022-05-10 15:17:17 -10:00
cancelorder.pl Bug 29658: Fix crash on cancelling cancelled order 2022-10-31 20:54:25 +00:00
check_budget_total.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
check_uniqueness.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
duplicate_orders.pl Bug 29859: Use iterator instead of as_list 2022-02-09 15:36:23 -10:00
edi_ean.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
edifactmsgs.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
edimsg.pl Bug 17600: Fix tests 2021-07-16 09:47:01 +02:00
finishreceive.pl Bug 29771: Remove trivial cases 2022-03-08 23:03:34 -10:00
histsearch.pl Bug 29859: Use iterator instead of as_list 2022-02-09 15:36:23 -10:00
invoice-files.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
invoice.pl Bug 24190: (QA follow-up) record unchanged bookfund and fix typo 2021-09-21 20:22:57 +02:00
invoices.pl Bug 29844: Fix ->search occurrences 2022-02-09 15:36:23 -10:00
lateorders-export.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
lateorders.pl Bug 29859: Use iterator instead of as_list 2022-02-09 15:36:23 -10:00
modordernotes.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
neworderempty.pl Bug 29554: Do not hide display of itemtypes on neworderempty 2022-12-05 20:09:09 +00:00
newordersubscription.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
newordersuggestion.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
ordered.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
orderreceive.pl Bug 31459: (follow-up) Preserve budget period display 2022-12-05 22:47:05 +00:00
parcel.pl Bug 17600: Fix tests 2021-07-16 09:47:01 +02:00
parcels.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
showorder.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
spent.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
supplier.pl Bug 28082: Add acquisitions toolbar to vendors on vendor search page 2022-05-10 15:17:17 -10:00
transferorder.pl Bug 29859: Use iterator instead of as_list 2022-02-09 15:36:23 -10:00
uncertainprice.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
updatesupplier.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
z3950_search.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00