Bug 13510 : Fixing the third XSS issue
authorChris <chris@bigballofwax.co.nz>
Mon, 5 Jan 2015 06:37:51 +0000 (06:37 +0000)
committerChris Cormack <chrisc@catalyst.net.nz>
Thu, 22 Jan 2015 07:02:17 +0000 (20:02 +1300)
commit6c67bbb100152a0452041786d3a10dd2051634d3
tree8fef8724ff0f1864451e3a38873bc4297a526011
parent27d410eb142a868aa25c6845272a7e8b51276f3b
Bug 13510 : Fixing the third XSS issue

To test

1/ Make sure you have some items in your database, that have values in items.issue
If nessecary do something like

UPDATE items SET issues = 10 WHERE itemnumber=somenumber

2/ Hit a url like http://localhost:8080/cgi-bin/koha/opac-topissues.pl?do_it=1&timeLimit=3%3Cscript%3Eprompt%28924513%29%3C/script%3E

3/ Notice you will get a prompt
4/ Apply patch
5/ Test again

Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-topissues.tt