Bugzilla – Attachment 186925 Details for
Bug 40766
Reflected XSS in set-library.pl
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 40766: [24.05.x] Prevent XSS on set-library
Bug-40766-2405x-Prevent-XSS-on-set-library.patch (text/plain), 1.53 KB, created by
Lucas Gass (lukeg)
on 2025-09-25 16:42:15 UTC
(
hide
)
Description:
Bug 40766: [24.05.x] Prevent XSS on set-library
Filename:
MIME Type:
Creator:
Lucas Gass (lukeg)
Created:
2025-09-25 16:42:15 UTC
Size:
1.53 KB
patch
obsolete
>From 7262ae1e8c38165f8c30564cecb08e9a241a20b5 Mon Sep 17 00:00:00 2001 >From: Lucas Gass <lucas@bywatersolutions.com> >Date: Thu, 25 Sep 2025 16:41:22 +0000 >Subject: [PATCH] Bug 40766: [24.05.x] Prevent XSS on set-library > >--- > koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > >diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt >index 23b4ca6dba0..e09a9fb87d0 100644 >--- a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt >+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt >@@ -95,10 +95,10 @@ > [% END %] > <fieldset class="action"> > <input type="submit" class="btn btn-primary" value="Submit" /> >- <a class="cancel" id="cancel_set_library" href="[% referer or '/cgi-bin/koha/mainpage.pl' %]">Cancel</a> >+ <a class="cancel" id="cancel_set_library" href="[% ( referer or '/cgi-bin/koha/mainpage.pl' ) | url %]">Cancel</a> > </fieldset> > <div class="noshow"> >- <input type="hidden" name="oldreferer" value="[% referer or "/cgi-bin/koha/mainpage.pl" %]" /> >+ <input type="hidden" name="oldreferer" value="[% ( referer or '/cgi-bin/koha/mainpage.pl' ) | url %]" /> > </div> > </form> > <!-- /updated --> >-- >2.39.5
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 40766
:
186256
|
186260
|
186306
|
186599
|
186600
| 186925