From 01c1a4a83635a2f04539251d41cd07d2d7fae459 Mon Sep 17 00:00:00 2001 From: Chris Cormack Date: Tue, 9 Oct 2012 14:19:18 +1300 Subject: [PATCH] [SIGNED-OFF] Bug 3652 XSS vulnerability in facets Signed-off-by: Katrin Fischer Confirmed bug with test plan on the bug and checked that problem is fixed after applying the patch and that facets still work. --- .../opac-tmpl/prog/en/includes/opac-facets.inc | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/koha-tmpl/opac-tmpl/prog/en/includes/opac-facets.inc b/koha-tmpl/opac-tmpl/prog/en/includes/opac-facets.inc index 082f846..07cdd3b 100644 --- a/koha-tmpl/opac-tmpl/prog/en/includes/opac-facets.inc +++ b/koha-tmpl/opac-tmpl/prog/en/includes/opac-facets.inc @@ -3,7 +3,7 @@

Refine your search

    -
  • Availability +
  • Availability [% IF ( related ) %]
  • (related searches: [% FOREACH relate IN related %][% relate.related_search %][% END %])
  • [% END %] @@ -20,8 +20,8 @@ [% END %] [% IF ( facets_loo.type_label_Location ) %]Locations[% END %]
      - [% FOREACH facet IN facets_loo.facets %]
    • [% facet.facet_label_value %] [% IF ( displayFacetCount ) %]([% facet.facet_count %])[% END %]
    • [% END %][% IF ( facets_loo.expandable ) %] -
    • Show more
    • + [% FOREACH facet IN facets_loo.facets %]
    • [% facet.facet_label_value %] [% IF ( displayFacetCount ) %]([% facet.facet_count %])[% END %]
    • [% END %][% IF ( facets_loo.expandable ) %] +
    • Show more
    • [% END %]
    [% END %] -- 1.7.9.5