gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Koha-clms/reserve
History
Jonathan Druart 4fbb259a0f Bug 17028: Fix XSS in reserve/request.pl 
Test plan:
Hit
  /cgi-bin/koha/reserve/request.pl?biblionumber=1"><script type="text/javascript">alert("XSS")</script>

=> Without this patch you will see the alert
=> With this patch, no more alert

Signed-off-by: Chris Cormack <chris@bigballofwax.co.nz>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>

Signed-off-by: Brendan Gallagher <brendan@bywatersolutions.com>
(cherry picked from commit 66f81fc210)
Signed-off-by: Frédéric Demians <f.demians@tamil.fr>
(cherry picked from commit 542c0dbbaa)
Signed-off-by: Chris Cormack <chris@bigballofwax.co.nz>
 		2016-08-08 18:54:56 +12:00
..
modrequest.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
modrequest_suspendall.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
placerequest.pl Bug 15638: spelling mistake in ~/Koha/reserve/placerequest.pl:4 2016-02-20 08:39:19 +01:00
renewscript.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
request.pl Bug 17028: Fix XSS in reserve/request.pl 2016-08-08 18:54:56 +12:00