Bugzilla – Attachment 186600 Details for
Bug 40766
Reflected XSS in set-library.pl
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 40766: (QA follow-up) Operator precedence, quoting
Bug-40766-QA-follow-up-Operator-precedence-quoting.patch (text/plain), 1.63 KB, created by
Marcel de Rooy
on 2025-09-19 06:33:43 UTC
(
hide
)
Description:
Bug 40766: (QA follow-up) Operator precedence, quoting
Filename:
MIME Type:
Creator:
Marcel de Rooy
Created:
2025-09-19 06:33:43 UTC
Size:
1.63 KB
patch
obsolete
>From 6bc174a18505a926d9cd61dca306e11967fbaf21 Mon Sep 17 00:00:00 2001 >From: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> >Date: Fri, 19 Sep 2025 08:30:17 +0200 >Subject: [PATCH] Bug 40766: (QA follow-up) Operator precedence, quoting >Content-Type: text/plain; charset=utf-8 > >Adding parentheses since I was not sure about precedence here. The filter >should be applied to the whole expression. >Adjusted double to single quotes in the second change. > >Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> >--- > koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > >diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt >index a8047d6853..7a12551989 100644 >--- a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt >+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt >@@ -96,10 +96,10 @@ > [% END %] > <fieldset class="action"> > <input type="submit" class="btn btn-primary" value="Submit" /> >- <a class="cancel" id="cancel_set_library" href="[% referer or '/cgi-bin/koha/mainpage.pl' | url %]">Cancel</a> >+ <a class="cancel" id="cancel_set_library" href="[% ( referer or '/cgi-bin/koha/mainpage.pl' ) | url %]">Cancel</a> > </fieldset> > <div class="noshow"> >- <input type="hidden" name="oldreferer" value="[% referer or "/cgi-bin/koha/mainpage.pl" | url %]" /> >+ <input type="hidden" name="oldreferer" value="[% ( referer or '/cgi-bin/koha/mainpage.pl' ) | url %]" /> > </div> > </form> > <!-- /updated --> >-- >2.39.5
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 40766
:
186256
|
186260
|
186306
|
186599
| 186600 |
186925