]> git.koha-community.org Git - koha.git/commit
Bug 22478: Prevent XSS vulnerabilities when pagination appears
authorJonathan Druart <jonathan.druart@bugs.koha-community.org>
Thu, 14 Mar 2019 22:42:50 +0000 (19:42 -0300)
committerFridolin Somers <fridolin.somers@biblibre.com>
Tue, 30 Apr 2019 07:21:33 +0000 (09:21 +0200)
commite3f3f18b83b7ea470e0ad73e24cd58bccab5adac
tree47962c6ce2bf2338b1a98ebda02b2621273ba13d
parent8b2778781c9ebd9687515fac4b9f86ff0eb272e2
Bug 22478: Prevent XSS vulnerabilities when pagination appears

This is a bad one as we thought we were XSS safe since bug 13618.

The html code generated in C4::Output::pagination_bar must escape the
variables and values correctly.

This patch needs to be widely tested, everywhere the pagination appears,
to make sure we will not introduce regressions.

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
(cherry picked from commit d4d1107afa873614ace241557e424de0dcbad20a)

Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
(cherry picked from commit f7b12a1cf3da62d8ed884692b4161dca1d456bfe)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
C4/Output.pm