Bug 16599: Fix XSS in opac-shareshelf.pl
authorJonathan Druart <jonathan.druart@bugs.koha-community.org>
Thu, 26 May 2016 11:03:55 +0000 (12:03 +0100)
committerJulian Maurice <julian.maurice@biblibre.com>
Thu, 16 Jun 2016 07:02:09 +0000 (09:02 +0200)
commit858e3b2043e0eb1ce5bb9a6c36b3b87afb69ae22
treeef14a2d61282f658ca1cb82a03dd0e0b5005c6c0
parent3b1a7ba719b02b5b2dfaa30ddc368d1c034b3cd6
Bug 16599: Fix XSS in opac-shareshelf.pl

Test plan:
- Create a list with the name "<script>alert(1)</script>"
- On the shelf list, click on share
=> Without this patch you will see the JS alert
=> With this patch applied you won't see it

Reported by Kaybee at Dionach

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Brendan Gallagher <brendan@bywatersolutions.com>
(cherry picked from commit a44a930c076fceca0f7193f488e187d9849f89b6)
Signed-off-by: Julian Maurice <julian.maurice@biblibre.com>
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shareshelf.tt