git.koha-community.org Git - koha.git/commit

Bug 20982: Sanitize category to prevent XSS on opac-shelves.pl

== Test plan ==
1. Go to http://localhost:8080/cgi-bin/koha/opac-shelves.pl?category=function(){window.location.href%20=%20%27https://git.koha-community.org/stats/koha-master/authors.html%27}()
2. Note that you are redirected to another website
3. Apply the patch & restart services
4. Repeat the above and you are not redirected

Signed-off-by: Victor Grousset/tuxayo <victor@tuxayo.net>
Signed-off-by: David Cook <dcook@prosentient.com.au>

author	Jonathan Druart <jonathan.druart@bugs.koha-community.org>
	Thu, 20 May 2021 06:34:48 +0000 (08:34 +0200)
committer	Fridolin Somers <fridolin.somers@biblibre.com>
	Mon, 24 May 2021 08:05:37 +0000 (10:05 +0200)
commit	9fc3f224d2517844c9f7d36e394959d1d064a767
tree	432c2b8716e5ef61058e956d7e7519e7b4108a0b	tree \| snapshot
parent	c47fe0c6d8ce336e19d3167ff3b729b8a9026786	commit \| diff

koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves.tt		diff \| blob \| history
opac/opac-shelves.pl		diff \| blob \| history