projects / koha.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f3a8e5a) | patch
Bug 17025: Fix XSS in serials-search.pl
authorJonathan Druart <jonathan.druart@bugs.koha-community.org>
Tue, 2 Aug 2016 13:46:11 +0000 (14:46 +0100)
committerKyle M Hall <kyle@bywatersolutions.com>
Wed, 10 Aug 2016 13:17:19 +0000 (13:17 +0000)
commit1ea1504c30c5c34dd763027caee55dcf359e94cf
tree73b22d00f529a83547d23309a9c55cb88404d61etree | snapshot
parentf3a8e5a4117a0e95969ff2856dfcd95a6935ec55commit | diff
Bug 17025: Fix XSS in serials-search.pl

Test plan:
Hit
  /serials/serials-search.pl?ISSN_filter="%2F><script>alert('XSS')<%2Fscript>&searched=1
  /serials/serials-search.pl?title_filter="%2F><script>alert('XSS')<%2Fscript>&searched=1

=> Without this patch you will see the alert
=> With this patch, no more alert

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>

Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
koha-tmpl/intranet-tmpl/prog/en/includes/serials-search.inc diff | blob | history
koha-tmpl/intranet-tmpl/prog/en/includes/subscriptions-search.inc diff | blob | history
Mirror of git://git.koha-community.org/koha.git