]> git.koha-community.org Git - koha.git/commit
Bug 20982: Sanitize category to prevent XSS on opac-shelves.pl
authorJonathan Druart <jonathan.druart@bugs.koha-community.org>
Thu, 20 May 2021 06:34:48 +0000 (08:34 +0200)
committerAndrew Fuerste-Henry <andrew@bywatersolutions.com>
Tue, 25 May 2021 14:38:10 +0000 (14:38 +0000)
commitc20974570d5198c5c4326e8af977e525f43d9e62
tree364130f7fa957fb195c130d4b0d5672e57e771c8
parentcc05aaed8cbed09e256aa1da428ee6892f39a666
Bug 20982: Sanitize category to prevent XSS on opac-shelves.pl

== Test plan ==
1. Go to http://localhost:8080/cgi-bin/koha/opac-shelves.pl?category=function(){window.location.href%20=%20%27https://git.koha-community.org/stats/koha-master/authors.html%27}()
2. Note that you are redirected to another website
3. Apply the patch & restart services
4. Repeat the above and you are not redirected

Signed-off-by: Victor Grousset/tuxayo <victor@tuxayo.net>
Signed-off-by: David Cook <dcook@prosentient.com.au>
Signed-off-by: Andrew Fuerste-Henry <andrew@bywatersolutions.com>
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves.tt
opac/opac-shelves.pl