gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bug 26102: Prevent XSS when To.json is used: catalogue/results.tt 

To test, perform a search in the catalogue and verify that search term
highlighting works correctly.

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
This commit is contained in:
Owen Leonard 2020-08-11 12:57:48 +00:00 committed by Fridolin Somers
parent 120c693494
commit a55ff7fe87
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tt
View File

@ -725,7 +725,7 @@
[%- END -%]
var search_result = {
query_desc: "[% To.json( query_desc ) | $raw %]",
query_desc: "[% To.json( query_desc ) | html %]",
query_cgi: "[% query_cgi | html %]",
limit_cgi: "[% limit_cgi | html %]",
sort_cgi: "[% sort_cgi | html %]",