Bug 17022: Fix XSS in acqui/z3950_search.pl
authorJonathan Druart <jonathan.druart@bugs.koha-community.org>
Tue, 2 Aug 2016 13:15:09 +0000 (14:15 +0100)
committerChris Cormack <chrisc@catalyst.net.nz>
Mon, 8 Aug 2016 20:11:54 +0000 (08:11 +1200)
commitb5c351fd7fe3aba91d868aa49a3eb0abb1648324
treea23ebaac1c981050a348735dbf561fa14978476f
parentc6433c52bf9b853b7674fb585a13eecb22fc4b3a
Bug 17022: Fix XSS in acqui/z3950_search.pl

Test plan:
Enter the following in the different inputs:
<script>alert('XSS')</script>

=> Without this patch you will see the alert
=> With this patch, no more alert

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>
Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
koha-tmpl/intranet-tmpl/prog/en/modules/acqui/z3950_search.tt