Bugzilla – Attachment 12729 Details for
Bug 3652
XSS vulnerabilities
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 3652 : [SECURITY] XSS vulnerability
Bug-3652--SECURITY-XSS-vulnerability.patch (text/plain), 1.40 KB, created by
Magnus Enger
on 2012-10-08 08:52:12 UTC
(
hide
)
Description:
Bug 3652 : [SECURITY] XSS vulnerability
Filename:
MIME Type:
Creator:
Magnus Enger
Created:
2012-10-08 08:52:12 UTC
Size:
1.40 KB
patch
obsolete
>From 11bab1253c5160dd0b347e44d5edf3611954de03 Mon Sep 17 00:00:00 2001 >From: Chris Cormack <chrisc@catalyst.net.nz> >Date: Mon, 8 Oct 2012 21:30:49 +1300 >Subject: [PATCH] Bug 3652 : [SECURITY] XSS vulnerability > >Signed-off-by: Magnus Enger <magnus@enger.priv.no> >Works as advertised. After applying the patch, <blink>fish</blink> >is displayed on the page, but no blinking occurs. >--- > .../opac-tmpl/prog/en/modules/opac-shelves.tt | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > >diff --git a/koha-tmpl/opac-tmpl/prog/en/modules/opac-shelves.tt b/koha-tmpl/opac-tmpl/prog/en/modules/opac-shelves.tt >index 9e782fb..471dddb 100644 >--- a/koha-tmpl/opac-tmpl/prog/en/modules/opac-shelves.tt >+++ b/koha-tmpl/opac-tmpl/prog/en/modules/opac-shelves.tt >@@ -223,7 +223,7 @@ $(function() { > </div> > [% END %] > [% IF ( paramsloo.nopermission ) %] >- <div class="dialog alert">ERROR: You do not have adequate permission for that action on list [% paramsloo.nopermission %].</div> >+ <div class="dialog alert">ERROR: You do not have adequate permission for that action on list [% paramsloo.nopermission |html%].</div> > [% END %] > [% IF ( paramsloo.failgetitem ) %] > <div class="dialog alert">ERROR: No item found with barcode [% paramsloo.failgetitem %].</div> >-- >1.7.9.5
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 3652
:
1482
|
2364
|
2784
|
2785
|
2838
|
12728
|
12729
|
12730
|
12737
|
12738
|
12740
|
12741
|
12807
|
12808
|
12809
|
12820
|
12823
|
12835
|
12836
|
12876
|
12926