Attachment 125678 Details for Bug 24698 – Bug 24698: (QA follow-up) Filter untrusted input to prevent XSS

[patch] Bug 24698: (QA follow-up) Filter untrusted input to prevent XSS

Bug-24698-QA-follow-up-Filter-untrusted-input-to-p.patch (text/plain), 1.17 KB, created by Joonas Kylmälä on 2021-10-03 12:33:21 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Joonas Kylmälä

Created: 2021-10-03 12:33:21 UTC

Size: 1.17 KB

patch

obsolete

>From c59d06b14b4580a13d6dc0cf6894a1e55473e748 Mon Sep 17 00:00:00 2001
>From: =?UTF-8?q?Joonas=20Kylm=C3=A4l=C3=A4?= <joonas.kylmala@iki.fi>
>Date: Sun, 3 Oct 2021 12:19:30 +0000
>Subject: [PATCH] Bug 24698: (QA follow-up) Filter untrusted input to prevent
> XSS
>
>---
> .../cataloguing/value_builder/unimarc_leader_authorities.tt     | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
>diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/unimarc_leader_authorities.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/unimarc_leader_authorities.tt
>index 2e4e1a2b79..3a4962c23d 100644
>--- a/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/unimarc_leader_authorities.tt
>+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/cataloguing/value_builder/unimarc_leader_authorities.tt
>@@ -188,7 +188,7 @@
> //<![CDATA[
> function report() {
>     var doc   = opener.document;
>-    var field = doc.getElementById("[% index %]");
>+    var field = doc.getElementById("[% index | html %]");
> 
>     field.value ='     '+document.f_pop.f5.value+document.f_pop.f6.value+'  '+document.f_pop.f9.value+'22     '+document.f_pop.f17.value+'  '+'45  ';
> 
>-- 
>2.20.1

Actions: View | Diff | Splinter Review

Attachments on bug 24698: 118186 | 124437 | 125669 | 125670 | 125671 | 125672 | 125673 | 125674 | 125675 | 125676 | 125677 | 125678 | 125679 | 125680 | 125929 | 125930 | 125931 | 125932 | 125933 | 125934 | 125935 | 125936 | 125937 | 125938 | 125939 | 125940 | 125998 | 125999 | 126000 | 126001 | 126002 | 126003 | 126004 | 126005 | 126006 | 126007 | 126008 | 126009 | 126010