Bugzilla – Attachment 101121 Details for
Bug 24052
Koha::XSLT housekeeping for bug 23290 (follow-up)
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 24052: Add koha_xslt_security to koha-conf.xml
Bug-24052-Add-kohaxsltsecurity-to-koha-confxml.patch (text/plain), 1.83 KB, created by
Kyle M Hall (khall)
on 2020-03-20 14:33:19 UTC
(
hide
)
Description:
Bug 24052: Add koha_xslt_security to koha-conf.xml
Filename:
MIME Type:
Creator:
Kyle M Hall (khall)
Created:
2020-03-20 14:33:19 UTC
Size:
1.83 KB
patch
obsolete
>From 625742288a97a57e216ea28152725ed7c6939bb4 Mon Sep 17 00:00:00 2001 >From: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> >Date: Thu, 27 Feb 2020 08:02:03 +0000 >Subject: [PATCH] Bug 24052: Add koha_xslt_security to koha-conf.xml > >The line for enabling the unsafe expand_entities option is commented >and includes a warning to keep it like that ;) > >Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> >Signed-off-by: Owen Leonard <oleonard@myacpl.org> > >Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com> >--- > debian/templates/koha-conf-site.xml.in | 8 ++++++++ > etc/koha-conf.xml | 8 ++++++++ > 2 files changed, 16 insertions(+) > >diff --git a/debian/templates/koha-conf-site.xml.in b/debian/templates/koha-conf-site.xml.in >index ded7acea7c..319f492c23 100644 >--- a/debian/templates/koha-conf-site.xml.in >+++ b/debian/templates/koha-conf-site.xml.in >@@ -426,5 +426,13 @@ __END_SRU_PUBLICSERVER__ > </repo> > </plugin_repos> > >+ <koha_xslt_security> >+ <!-- Uncomment the following entry ONLY when you explicitly want the XSLT >+ parser to expand entities like <!ENTITY secret SYSTEM "/etc/secrets">. >+ This is unsafe and therefore NOT recommended! >+ <expand_entities_unsafe>1</expand_entities_unsafe> >+ --> >+ </koha_xslt_security> >+ > </config> > </yazgfs> >diff --git a/etc/koha-conf.xml b/etc/koha-conf.xml >index 519a9ccd54..5be267d656 100644 >--- a/etc/koha-conf.xml >+++ b/etc/koha-conf.xml >@@ -250,5 +250,13 @@ __PAZPAR2_TOGGLE_XML_POST__ > </repo> > </plugin_repos> > >+ <koha_xslt_security> >+ <!-- Uncomment the following entry ONLY when you explicitly want the XSLT >+ parser to expand entities like <!ENTITY secret SYSTEM "/etc/secrets">. >+ This is unsafe and therefore NOT recommended! >+ <expand_entities_unsafe>1</expand_entities_unsafe> >+ --> >+ </koha_xslt_security> >+ > </config> > </yazgfs> >-- >2.21.1 (Apple Git-122.3)
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 24052
:
99686
|
99687
|
99688
|
99689
|
100371
|
100372
|
100373
|
100374
|
100406
|
100407
|
100408
|
100409
|
100453
|
100454
|
100455
|
100456
|
101118
|
101119
|
101120
| 101121