gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bug 23058: Prevent XSS vulnerabiliies when 'tag' is passed to opac-search 

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
This commit is contained in:
Jonathan Druart 2019-06-05 18:40:54 -05:00 committed by Martin Renvoize
parent 162ea12db9
commit e75dc18424
No known key found for this signature in database
GPG Key ID: 422B469130441A0F
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
opac/opac-search.pl
View File

@ -607,7 +607,7 @@ my $results_hashref;
my @coins;
if ($tag) {
$query_cgi = "tag=" .$tag . "&" . $query_cgi;
$query_cgi = "tag=" . uri_escape_utf8( $tag ) . "&" . $query_cgi;
my $taglist = get_tags({term=>$tag, approved=>1});
$results_hashref->{biblioserver}->{hits} = scalar (@$taglist);
my @marclist = map { C4::Biblio::GetXmlBiblio( $_->{biblionumber} ) } @$taglist;