From 9b42a3f9b29c1c09d24067832a14b9af173e0af5 Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Tue, 2 Aug 2016 14:51:49 +0100 Subject: [PATCH] Bug 17026: Fix XSS in serials/checkexpiration.pl MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit Test plan: Hit: /serials/checkexpiration.pl?title=">&date=12/02/2002 /serials/checkexpiration.pl?issn=">&date=12/02/2002 => Without this patch you will see the alert => With this patch, no more alert Signed-off-by: Chris Cormack Signed-off-by: Katrin Fischer Signed-off-by: Brendan Gallagher (cherry picked from commit 9d00353a92487dcde654d88206fd5458448fff1b) Signed-off-by: Frédéric Demians (cherry picked from commit ec78a0d43fe8032d9eeb9272878129085c3c429f) Signed-off-by: Julian Maurice --- .../prog/en/modules/serials/checkexpiration.tt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt index 7fb484b693..0120ee260d 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt @@ -49,10 +49,10 @@
  1. -
  2. +
  3. -
  4. + [% IF (branches_loop.size) %]