Bug 19569: Set X-Frame-Options=SAMEORIGIN - opac-showmarc.ok
authorJonathan Druart <jonathan.druart@bugs.koha-community.org>
Thu, 2 Nov 2017 19:14:12 +0000 (16:14 -0300)
committerChris Cormack <chrisc@catalyst.net.nz>
Wed, 20 Dec 2017 23:49:15 +0000 (12:49 +1300)
Before and after:
wget 'http://catalogue.kohadev.org/cgi-bin/koha/opac-showmarc.pl?id=1&viewas=html'
must be the same

Signed-off-by: Mark Tompsett <mtompset@hotmail.com>

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

opac/opac-showmarc.pl

index 250c519..8ee73ca 100755 (executable)
@@ -68,8 +68,7 @@ if ($view eq 'card' || $view eq 'html') {
     my $htdocs = C4::Context->config('opachtdocs');
     my ($theme, $lang) = C4::Templates::themelanguage($htdocs, $xsl, 'opac', $input);
     $xsl = "$htdocs/$theme/$lang/xslt/$xsl";
-    print $input->header(-charset => 'UTF-8'),
-          Encode::encode_utf8(C4::XSLT::engine->transform($xml, $xsl));
+    output_html_with_http_headers $input, undef, Encode::encode_utf8(C4::XSLT::engine->transform($xml, $xsl));
 }
 else { #view eq marc
     my ( $template, $loggedinuser, $cookie ) = get_template_and_user({