From 9d00353a92487dcde654d88206fd5458448fff1b Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Tue, 2 Aug 2016 14:51:49 +0100 Subject: [PATCH] Bug 17026: Fix XSS in serials/checkexpiration.pl Test plan: Hit: /serials/checkexpiration.pl?title=">&date=12/02/2002 /serials/checkexpiration.pl?issn=">&date=12/02/2002 => Without this patch you will see the alert => With this patch, no more alert Signed-off-by: Chris Cormack Signed-off-by: Katrin Fischer Signed-off-by: Brendan Gallagher --- .../prog/en/modules/serials/checkexpiration.tt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt index 8b693201ae..5e573ff234 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt @@ -49,10 +49,10 @@
  1. -
  2. +
  3. -
  4. + [% IF (branches_loop.size) %]