From 3454c9a658335aae8c1c4ccc9dedfd36dcbcb163 Mon Sep 17 00:00:00 2001
From: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Date: Thu, 26 May 2016 11:07:47 +0100
Subject: [PATCH] Bug 16597: Fix XSS in shelves.pl

Reported by
Alex Middleton at Dionach

Signed-off-by: Chris Cormack <chris@bigballofwax.co.nz>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Brendan Gallagher <brendan@bywatersolutions.com>
(cherry picked from commit fa1dd408ca7714aed406ff75d3c4c55545b97cf0)
Signed-off-by: Julian Maurice <julian.maurice@biblibre.com>
---
 .../intranet-tmpl/prog/en/modules/virtualshelves/shelves.tt     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/shelves.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/shelves.tt
index 722ce50249..56f8620aac 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/shelves.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/shelves.tt
@@ -524,7 +524,7 @@ function placeHold () {
             <legend>Edit list <i>[% shelf.shelfname | html %]</i></legend>
             <input type="hidden" name="op" value="edit" />
         [% END %]
-        <input type="hidden" name="referer" value="[% referer %]" />
+        <input type="hidden" name="referer" value="[% referer | html %]" />
         <input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber %]" />
         <ol>
             <li>
-- 
2.39.5