git.koha-community.org Git - koha.git/commit

]> git.koha-community.org Git - koha.git/commit

author	Jonathan Druart <jonathan.druart@bugs.koha-community.org>
	Wed, 9 Aug 2017 17:08:24 +0000 (14:08 -0300)
committer	Mason James <mtj@kohaaloha.com>
	Thu, 24 Aug 2017 05:36:45 +0000 (17:36 +1200)
commit	307d369a361e34a304d1de25f0d8cde5c05d5d98
tree	ec93f7da73e42dc4154cf266b7a4438a66f83935	tree \| snapshot
parent	87a94426ea2dc2f4449cb1c5a8222a463d4ab1d8	commit \| diff

Bug 18726: Fix XSS at the OPAC - biblionumber

The biblionumber parameter is sent by the user, we must escape all of
them to avoid XSS.

Fixes: Cross-site scripting OPAC pages
Signed-off-by: Amit Gupta <amit.gupta@informaticsglobal.com>
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Mason James <mtj@kohaaloha.com>

Main Koha release repository

RSS Atom

koha-tmpl/opac-tmpl/bootstrap/en/includes/opac-bottom.inc		diff \| blob \| history
koha-tmpl/opac-tmpl/bootstrap/en/includes/opac-detail-sidebar.inc		diff \| blob \| history
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-ISBDdetail.tt		diff \| blob \| history
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-MARCdetail.tt		diff \| blob \| history
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-alert-subscribe.tt		diff \| blob \| history
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-detail.tt		diff \| blob \| history
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-full-serial-issues.tt		diff \| blob \| history
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-serial-issues.tt		diff \| blob \| history