gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bug 16597: Fix XSS in shelves.pl 

Reported by
Alex Middleton at Dionach

Signed-off-by: Chris Cormack <chris@bigballofwax.co.nz>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Brendan Gallagher <brendan@bywatersolutions.com>
This commit is contained in:
Jonathan Druart 2016-05-26 11:07:47 +01:00 committed by Brendan Gallagher
parent c47c835672
commit fa1dd408ca
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
koha-tmpl/intranet-tmpl/prog/en/modules/virtualshelves/shelves.tt
View File

@ -529,7 +529,7 @@ function placeHold () {
<legend>Edit list <i>[% shelf.shelfname | html %]</i></legend>
<input type="hidden" name="op" value="edit" />
[% END %]
<input type="hidden" name="referer" value="[% referer %]" />
<input type="hidden" name="referer" value="[% referer | html %]" />
<input type="hidden" name="shelfnumber" value="[% shelf.shelfnumber %]" />
<ol>
<li>