From 9b4777878f59c7a0c3653f54b6a2cff85bb278a8 Mon Sep 17 00:00:00 2001
From: Amit Gupta <amit.gupta@informaticsglobal.com>
Date: Wed, 16 Aug 2017 17:56:17 +0530
Subject: [PATCH] Bug 19127 - Stored XSS in csv-profiles.pl

To Test
1. Hit the page /cgi-bin/koha/tools/csv-profiles.pl?op=add_form
2. Add a text in the field Profile name, Profile description
   and Profile MARC fields that contains js
3. Save the page.
4. Notice js is execute
5. Apply patch and reload, the js is escaped

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
(cherry picked from commit 7a3ee2dd8cb233d083d8a7b8636eca7c6d518b8b)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
---
 .../intranet-tmpl/prog/en/modules/tools/csv-profiles.tt     | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/csv-profiles.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/tools/csv-profiles.tt
index 11bb1660b4..62aebcce8a 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/csv-profiles.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/tools/csv-profiles.tt
@@ -238,9 +238,9 @@ function reloadPage(p) {
                 [% FOREACH csv_profile IN csv_profiles %]
                 <tr>
                     <td>[% csv_profile.export_format_id %]</td>
-                    <td>[% csv_profile.profile %]</td>
-                    <td>[% csv_profile.description %]</td>
-                    <td>[% csv_profile.content %]</td>
+                    <td>[% csv_profile.profile |html %]</td>
+                    <td>[% csv_profile.description |html %]</td>
+                    <td>[% csv_profile.content |html %]</td>
                     <td>[% csv_profile.csv_separator %]</td>
                     [% IF csv_profile.type == 'sql' %]
                         <td>SQL</td>
-- 
2.39.5