]> git.koha-community.org Git - koha.git/commit
Bug 16800: Fix XSS in catalogue/*detail.tt - author
authorJonathan Druart <jonathan.druart@bugs.koha-community.org>
Tue, 2 Aug 2016 15:03:37 +0000 (16:03 +0100)
committerJulian Maurice <julian.maurice@biblibre.com>
Fri, 14 Oct 2016 10:12:30 +0000 (12:12 +0200)
commitfd6594246e28b99d74abce87f0c515787805ea4d
tree86f422f62dab871d8dc5599df92b6df598b45fc2
parentc55f33030fa31842f04fda06b22d5a7bb9831134
Bug 16800: Fix XSS in catalogue/*detail.tt - author

Test plan:
catalogue a bibliographic record with a author=
  </title><script>alert('XSS')</script>

Go on the detail pages.
=> Without this patch you will see the alert
=> With this patch, no more alert

Signed-off-by: Chris Cormack <chris@bigballofwax.co.nz>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
(cherry picked from commit 3169434cfa7295025e4ff5fea58f7e9730a96650)
Signed-off-by: Frédéric Demians <f.demians@tamil.fr>
(cherry picked from commit 4ab091d3bfd2c6659320cbe80d35b805cff3aa4e)
Signed-off-by: Julian Maurice <julian.maurice@biblibre.com>
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/detail.tt
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/moredetail.tt