Koha/koha-tmpl/intranet-tmpl
Amit Gupta ee3bfd5d69 Bug 19078 - XSS Flaws in System preferences
1. Hit /cgi-bin/koha/admin/preferences.pl
2. Enter <script>alert('amit')</script> in search system preferences box.
3. Notice the java script is executed.
4. Apply patch.
5. Reload page, and enter <script>alert('amit')</script> in search system preferences box.
6. Notice it is no longer executed.

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
2017-08-29 12:00:37 -03:00
..
js Bug 16456: Add Font Awesome icons to some buttons in Tools module, section Patrons and circulation 2016-06-17 15:40:24 +00:00
lib Bug 17288 - Advanced Editor - Rancor - Helpers for 006 and 007 fields 2017-08-25 10:59:03 -03:00
prog Bug 19078 - XSS Flaws in System preferences 2017-08-29 12:00:37 -03:00