Bug 21454: Do not require html filter on Price
authorJonathan Druart <jonathan.druart@bugs.koha-community.org>
Sat, 29 Sep 2018 16:10:19 +0000 (13:10 -0300)
committerNick Clemens <nick@bywatersolutions.com>
Mon, 1 Oct 2018 13:56:33 +0000 (13:56 +0000)
commitd68d8f4f3672256fbd233310d1d4aa5857c28a8c
treebac2af3061241c3978c8c47f0c59e94d3c28cdd9
parentd98ee2ad8bafebd877ccb85180f37e0b54d79e4c
Bug 21454: Do not require html filter on Price

Test plan:
- Apply first patch
- Confirm that tests is failing (t/template_filters.t)
- Apply second patch
- Confirm that tests return green
- Apply last patch
- Confirm that prices are displayed correctly

QA step:
Edit a template and add the following 2 lines:
[% SET p = '<script>alert("foo");</script>' %]
[% x | $Price %]
=> Display '0.00'

Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
t/lib/QA/TemplateFilters.pm