Koha/koha-tmpl
Amit Gupta ee3bfd5d69 Bug 19078 - XSS Flaws in System preferences
1. Hit /cgi-bin/koha/admin/preferences.pl
2. Enter <script>alert('amit')</script> in search system preferences box.
3. Notice the java script is executed.
4. Apply patch.
5. Reload page, and enter <script>alert('amit')</script> in search system preferences box.
6. Notice it is no longer executed.

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
2017-08-29 12:00:37 -03:00
..
intranet-tmpl Bug 19078 - XSS Flaws in System preferences 2017-08-29 12:00:37 -03:00
opac-tmpl Bug 18726: Fix XSS at the OPAC - biblionumber 2017-08-29 12:00:37 -03:00
favicon.ico
index.html
intranet.html
opac.html