Bugzilla – Attachment 112595 Details for
Bug 26592
XSS vulnerability when ysearch is used
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 26592: [19.11] (rmaint follow-up) Fix JS error when using patron autocomplete searchbar
Bug-26592-1911-rmaint-follow-up-Fix-JS-error-when-.patch (text/plain), 1.98 KB, created by
Aleisha Amohia
on 2020-10-27 20:08:37 UTC
(
hide
)
Description:
Bug 26592: [19.11] (rmaint follow-up) Fix JS error when using patron autocomplete searchbar
Filename:
MIME Type:
Creator:
Aleisha Amohia
Created:
2020-10-27 20:08:37 UTC
Size:
1.98 KB
patch
obsolete
>From 592cf3d465c7e48d413e437c86661a6a963f4bbf Mon Sep 17 00:00:00 2001 >From: Aleisha Amohia <aleishaamohia@hotmail.com> >Date: Wed, 28 Oct 2020 09:07:01 +1300 >Subject: [PATCH] Bug 26592: [19.11] (rmaint follow-up) Fix JS error when using > patron autocomplete searchbar > >--- > koha-tmpl/intranet-tmpl/prog/en/includes/js_includes.inc | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > >diff --git a/koha-tmpl/intranet-tmpl/prog/en/includes/js_includes.inc b/koha-tmpl/intranet-tmpl/prog/en/includes/js_includes.inc >index 594f322598..3ae30cf446 100644 >--- a/koha-tmpl/intranet-tmpl/prog/en/includes/js_includes.inc >+++ b/koha-tmpl/intranet-tmpl/prog/en/includes/js_includes.inc >@@ -102,7 +102,7 @@ > } > return $( "<li></li>" ) > .data( "ui-autocomplete-item", item ) >- .append( "<a href=\"" + item.link + "\">" + ( item.surname ? item.surname.escapeHtml() : "" ) + ", " + ( item.firstname ? item.firstname.escapeHtml : "" ) + ( cardnumber ? cardnumber.escapeHtml() : "" ) + " <small>" + ( item.dateofbirth ? item.dateofbirth.escapeHtml() : "" ) + " " + ( item.address ? item.address.escapeHtml() : "" ) + " " + ( item.city ? item.city.escapeHtml() : "" ) + " " + ( item.zipcode ? item.zipcode.escapeHtml() : "" ) + " " + ( item.country ? item.country.escapeHtml() : "" ) + "</small></a>" ) >+ .append( "<a href=\"" + item.link + "\">" + ( item.surname ? item.surname.escapeHtml() : "" ) + ", " + ( item.firstname ? item.firstname.escapeHtml() : "" ) + ( cardnumber ? cardnumber.escapeHtml() : "" ) + " <small>" + ( item.dateofbirth ? item.dateofbirth.escapeHtml() : "" ) + " " + ( item.address ? item.address.escapeHtml() : "" ) + " " + ( item.city ? item.city.escapeHtml() : "" ) + " " + ( item.zipcode ? item.zipcode.escapeHtml() : "" ) + " " + ( item.country ? item.country.escapeHtml() : "" ) + "</small></a>" ) > .appendTo( ul ); > }; > } >-- >2.11.0
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 26592
:
111026
|
111075
|
111384
|
111385
|
111386
|
111722
|
111737
| 112595