gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bug 19127 - Stored XSS in csv-profiles.pl 

To Test
1. Hit the page /cgi-bin/koha/tools/csv-profiles.pl?op=add_form
2. Add a text in the field Profile name, Profile description
   and Profile MARC fields that contains js
3. Save the page.
4. Notice js is execute
5. Apply patch and reload, the js is escaped

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
(cherry picked from commit 7a3ee2dd8cb233d083d8a7b8636eca7c6d518b8b)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
(cherry picked from commit 9b4777878f)
Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
This commit is contained in:
Amit Gupta 2017-08-16 17:56:17 +05:30 committed by Katrin Fischer
parent 5950aed63a
commit aa628f89fd
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
koha-tmpl/intranet-tmpl/prog/en/modules/tools/csv-profiles.tt
View File

@ -238,9 +238,9 @@ function reloadPage(p) {
[% FOREACH csv_profile IN csv_profiles %]
<tr>
<td>[% csv_profile.export_format_id %]</td>
<td>[% csv_profile.profile %]</td>
<td>[% csv_profile.description %]</td>
<td>[% csv_profile.content %]</td>
<td>[% csv_profile.profile |html %]</td>
<td>[% csv_profile.description |html %]</td>
<td>[% csv_profile.content |html %]</td>
<td>[% csv_profile.csv_separator %]</td>
[% IF csv_profile.type == 'sql' %]
<td>SQL</td>