]> git.koha-community.org Git - koha.git/commit
Bug 36244: Do template toolkit processing first
authorAndreas Jonsson <andreas.jonsson@kreablo.se>
Thu, 7 Mar 2024 09:12:25 +0000 (09:12 +0000)
committerLucas Gass <lucas@bywatersolutions.com>
Tue, 26 Mar 2024 15:44:22 +0000 (15:44 +0000)
commit0e853fc1464ad6136d9bec1db063433b38a85fb9
tree30768c9bc065092023aed70ae4f7a507814225dd
parentfbbaad4ac3ef3d7300373b00b420281b22c88995
Bug 36244: Do template toolkit processing first

To avoid injection of template toolkit code
from database fields that are controlled by
untrusted sources.

Test plan:

* review subtest 'Template toolkit syntax in
  parameters' in t/db_dependent/Letters.t
* Run the unit test:
  prove t/db_dependent/Letters.t

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
C4/Letters.pm