Bugzilla – Attachment 152382 Details for
Bug 34023
HTML injection in "back to results" link from search page
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Trivial patch
koha-xss.patch (text/plain), 483 bytes, created by
Michał Górny
on 2023-06-15 13:04:53 UTC
(
hide
)
Description:
Trivial patch
Filename:
MIME Type:
Creator:
Michał Górny
Created:
2023-06-15 13:04:53 UTC
Size:
483 bytes
patch
obsolete
>diff --git a/opac/opac-search.pl b/opac/opac-search.pl >index 958f4ca..9685149 100755 >--- a/opac/opac-search.pl >+++ b/opac/opac-search.pl >@@ -367,7 +367,7 @@ for (keys %$params) { > my @pasarParam = $cgi->multi_param($_); > for my $paramValue(@pasarParam) { > $pasarParams .= '&' if ($j > 0); >- $pasarParams .= $_ . '=' . uri_escape_utf8($paramValue); >+ $pasarParams .= uri_escape_utf8($_) . '=' . uri_escape_utf8($paramValue); > $j++; > } > }
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 34023
:
152382
|
152420
|
153865