Bug 25381: XSLTs should not define entities
authorDidier Gautheron <didier.gautheron@biblibre.com>
Fri, 8 May 2020 13:19:54 +0000 (15:19 +0200)
committerAndrew Fuerste-Henry <andrew@bywatersolutions.com>
Wed, 3 Feb 2021 22:05:35 +0000 (22:05 +0000)
commit8bb737e1fa69221fc87ff5940cbabd87375d6ce9
treeca03a705bd0a2be621c931587bd3e53915974900
parentb9bf7eef0d88e0f7b08d401d3c0f4e6695992e22
Bug 25381: XSLTs should not define entities

Bug 23290 explicitly disabled entity expansion during XML parsing for security reasons.

However, many XSLTs define the following entity:
<!ENTITY nbsp "&#160;" >

They don't use the entity &nbsp, but its presence could lead to confusion.

Signed-off-by: Eden Bacani <eden.bacani@gmail.com>
Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
(cherry picked from commit 10c08b6552c7063c4c029701018d6f54e6549acb)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
(cherry picked from commit c83158f5bf80f6f4fdfd5ae7e6abfbfbc033f681)

Signed-off-by: Andrew Fuerste-Henry <andrew@bywatersolutions.com>
50 files changed:
koha-tmpl/intranet-tmpl/prog/en/data/marc21_field_006.xml
koha-tmpl/intranet-tmpl/prog/en/data/marc21_field_007.xml
koha-tmpl/intranet-tmpl/prog/en/data/marc21_field_008.xml
koha-tmpl/intranet-tmpl/prog/en/data/marc21_field_CF.xsd
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21Languages.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2ATOM.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2DC.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2MADS.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2MODS.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2MODS3-1.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2MODS3.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2MODS32.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2OAIDC.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2RDFDC.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2RDFDC.xsl.1
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2RSS2.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2SRWDC.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2intranetDetail.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2intranetResults.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim9522852.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slimUtils-MODS31.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slimUtils.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slimUtils2.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/NORMARCslim2OAIDC.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/NORMARCslim2intranetDetail.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/NORMARCslim2intranetResults.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/NORMARCslimUtils.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/UNIMARC_compact.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/UNIMARCslim2OAIDC.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/UNIMARCslim2RDFDC.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/UNIMARCslim2intranetDetail.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/UNIMARCslim2intranetResults.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/UNIMARCslimUtils.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/compact.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/identity.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/oilsMARC21slim2HTML.xsl
koha-tmpl/intranet-tmpl/prog/en/xslt/plainMARC.xsl
koha-tmpl/opac-tmpl/bootstrap/en/xslt/MARC21Languages.xsl
koha-tmpl/opac-tmpl/bootstrap/en/xslt/MARC21slim2OPACDetail.xsl
koha-tmpl/opac-tmpl/bootstrap/en/xslt/MARC21slim2OPACResults.xsl
koha-tmpl/opac-tmpl/bootstrap/en/xslt/MARC21slimUtils.xsl
koha-tmpl/opac-tmpl/bootstrap/en/xslt/NORMARCslim2OPACDetail.xsl
koha-tmpl/opac-tmpl/bootstrap/en/xslt/NORMARCslim2OPACResults.xsl
koha-tmpl/opac-tmpl/bootstrap/en/xslt/NORMARCslimUtils.xsl
koha-tmpl/opac-tmpl/bootstrap/en/xslt/UNIMARCslim2OPACDetail.xsl
koha-tmpl/opac-tmpl/bootstrap/en/xslt/UNIMARCslim2OPACResults.xsl
koha-tmpl/opac-tmpl/bootstrap/en/xslt/UNIMARCslimUtils.xsl
koha-tmpl/opac-tmpl/bootstrap/en/xslt/compact.xsl
koha-tmpl/opac-tmpl/bootstrap/en/xslt/plainMARC.xsl
misc/maintenance/generate_MARC21Languages.pl