Bugzilla – Attachment 186306 Details for
Bug 40766
Reflected XSS in set-library.pl
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 40766: Prevent XSS on set-library
Bug-40766-Prevent-XSS-on-set-library.patch (text/plain), 1.40 KB, created by
David Cook
on 2025-09-10 03:35:08 UTC
(
hide
)
Description:
Bug 40766: Prevent XSS on set-library
Filename:
MIME Type:
Creator:
David Cook
Created:
2025-09-10 03:35:08 UTC
Size:
1.40 KB
patch
obsolete
>From c0ef0f1de23759b80dc140b46b545d55ef5b7051 Mon Sep 17 00:00:00 2001 >From: Jonathan Druart <jonathan.druart@bugs.koha-community.org> >Date: Mon, 8 Sep 2025 16:05:59 +0200 >Subject: [PATCH] Bug 40766: Prevent XSS on set-library > >Signed-off-by: David Cook <dcook@prosentient.com.au> >--- > koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > >diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt >index 757ffdab05..a8047d6853 100644 >--- a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt >+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt >@@ -96,10 +96,10 @@ > [% END %] > <fieldset class="action"> > <input type="submit" class="btn btn-primary" value="Submit" /> >- <a class="cancel" id="cancel_set_library" href="[% referer or '/cgi-bin/koha/mainpage.pl' %]">Cancel</a> >+ <a class="cancel" id="cancel_set_library" href="[% referer or '/cgi-bin/koha/mainpage.pl' | url %]">Cancel</a> > </fieldset> > <div class="noshow"> >- <input type="hidden" name="oldreferer" value="[% referer or "/cgi-bin/koha/mainpage.pl" %]" /> >+ <input type="hidden" name="oldreferer" value="[% referer or "/cgi-bin/koha/mainpage.pl" | url %]" /> > </div> > </form> > <!-- /updated --> >-- >2.39.5
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 40766
:
186256
|
186260
|
186306
|
186599
|
186600
|
186925