Bugzilla – Attachment 174659 Details for
Bug 38467
Template::Toolkit filters can create risky Javascript when not using RFC3986
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 38467: Make uri and url filters rfc3986 when using C4::Template
Bug-38467-Make-uri-and-url-filters-rfc3986-when-us.patch (text/plain), 1.18 KB, created by
David Cook
on 2024-11-18 05:38:44 UTC
(
hide
)
Description:
Bug 38467: Make uri and url filters rfc3986 when using C4::Template
Filename:
MIME Type:
Creator:
David Cook
Created:
2024-11-18 05:38:44 UTC
Size:
1.18 KB
patch
obsolete
>From 914873d622d560154064409acf1bf6dc21cab462 Mon Sep 17 00:00:00 2001 >From: David Cook <dcook@prosentient.com.au> >Date: Mon, 18 Nov 2024 05:37:18 +0000 >Subject: [PATCH] Bug 38467: Make uri and url filters rfc3986 when using > C4::Template > >This change invokes Template::Filters->use_rfc3986 in the C4::Template >module. > >Test plan: >0. Apply the patch >1. Note that "uri" and "url" filters now escape single quotes >--- > C4/Templates.pm | 2 ++ > 1 file changed, 2 insertions(+) > >diff --git a/C4/Templates.pm b/C4/Templates.pm >index fb7d3e5cb5..d746d88e9e 100644 >--- a/C4/Templates.pm >+++ b/C4/Templates.pm >@@ -31,6 +31,7 @@ C4::Templates - Object for manipulating templates for use with Koha > > use base qw(Class::Accessor); > use Template; >+use Template::Filters; > use C4::Languages qw( get_bidi getTranslatedLanguages regex_lang_subtags ); > > use C4::Context; >@@ -70,6 +71,7 @@ sub new { > > # Do not use template cache if script is called from commandline > my $use_template_cache = C4::Context->config('template_cache_dir') && defined $ENV{GATEWAY_INTERFACE}; >+ Template::Filters->use_rfc3986(); > my $template = Template->new( > { EVAL_PERL => 1, > ABSOLUTE => 1, >-- >2.39.5
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 38467
:
174659
|
174660
|
174762
|
174819
|
175465
|
175466
|
175685
|
175686
|
175687
|
175688
|
176135
|
176136
|
176137
|
176138
|
179195