projects / koha.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ea88688) | patch
Bug 18726: Fix XSS at the OPAC - biblionumber
authorJonathan Druart <jonathan.druart@bugs.koha-community.org>
Wed, 9 Aug 2017 17:08:24 +0000 (14:08 -0300)
committerJonathan Druart <jonathan.druart@bugs.koha-community.org>
Tue, 29 Aug 2017 15:00:37 +0000 (12:00 -0300)
commitf94162564ad57ac9747d3967ba6671d982545dbc
tree53bb6b148d5e47bd7477bf0eff2c99551e078a20tree | snapshot
parentea886885d0efa0200cfa166453a4495692afc4d4commit | diff
Bug 18726: Fix XSS at the OPAC - biblionumber

The biblionumber parameter is sent by the user, we must escape all of
them to avoid XSS.

Fixes: Cross-site scripting OPAC pages

Signed-off-by: Amit Gupta <amit.gupta@informaticsglobal.com>
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
koha-tmpl/opac-tmpl/bootstrap/en/includes/opac-bottom.inc diff | blob | history
koha-tmpl/opac-tmpl/bootstrap/en/includes/opac-detail-sidebar.inc diff | blob | history
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-ISBDdetail.tt diff | blob | history
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-MARCdetail.tt diff | blob | history
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-alert-subscribe.tt diff | blob | history
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-detail.tt diff | blob | history
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-full-serial-issues.tt diff | blob | history
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-serial-issues.tt diff | blob | history
Main Koha release repository