Koha-clms/reserve
Jonathan Druart 5e301bc138 Bug 17028: Fix XSS in reserve/request.pl
Test plan:
Hit
  /cgi-bin/koha/reserve/request.pl?biblionumber=1"><script type="text/javascript">alert("XSS")</script>

=> Without this patch you will see the alert
=> With this patch, no more alert

Signed-off-by: Chris Cormack <chris@bigballofwax.co.nz>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>

Signed-off-by: Brendan Gallagher <brendan@bywatersolutions.com>
(cherry picked from commit 66f81fc210)
Signed-off-by: Frédéric Demians <f.demians@tamil.fr>
(cherry picked from commit 542c0dbbaa)
Signed-off-by: Julian Maurice <julian.maurice@biblibre.com>
2016-08-17 14:14:48 +02:00
..
modrequest.pl Bug 16154: CGI->multi_param - Declare a list 2016-05-16 14:38:51 +02:00
modrequest_suspendall.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
placerequest.pl Bug 16154: CGI->multi_param - Declare a list 2016-05-16 14:38:51 +02:00
request.pl Bug 17028: Fix XSS in reserve/request.pl 2016-08-17 14:14:48 +02:00