Bugzilla – Attachment 35477 Details for
Bug 13609
Cross Site Scripting problem in authority search
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 13609: Patch for 3.16.x and 3.14.x (3.16.x needs both, 3.14.x just this)
Bug-13609-Patch-for-316x-and-314x-316x-needs-both-.patch (text/plain), 3.47 KB, created by
Chris Cormack
on 2015-01-22 19:44:51 UTC
(
hide
)
Description:
Bug 13609: Patch for 3.16.x and 3.14.x (3.16.x needs both, 3.14.x just this)
Filename:
MIME Type:
Creator:
Chris Cormack
Created:
2015-01-22 19:44:51 UTC
Size:
3.47 KB
patch
obsolete
>From d8ae296608304cd97646782823eb98066d7717a5 Mon Sep 17 00:00:00 2001 >From: Chris Cormack <chrisc@catalyst.net.nz> >Date: Fri, 23 Jan 2015 08:43:14 +1300 >Subject: [PATCH] Bug 13609: Patch for 3.16.x and 3.14.x (3.16.x needs both, > 3.14.x just this) > >To Test: > >- Use an installation a reasonable amount of authorities, so that you > can have a search result list with more than one page >- Activate OpacAuthorities >- Create an OPAC link like shown below, verify that an alert is shown >- Apply patch >- Refresh the page and no alert should appear >- Verify the paging still works correctly for 'numbers' and 'arrows' > >URL: .../cgi-bin/koha/opac-authorities-home.pl?and_or=and&marclist=match&op=do_search&operator=contains&orderby=HeadingAsc2"><script>prompt(987898)</script> >--- > .../opac-tmpl/prog/en/modules/opac-authoritiessearchresultlist.tt | 6 +++--- > 1 file changed, 3 insertions(+), 3 deletions(-) > >diff --git a/koha-tmpl/opac-tmpl/prog/en/modules/opac-authoritiessearchresultlist.tt b/koha-tmpl/opac-tmpl/prog/en/modules/opac-authoritiessearchresultlist.tt >index 7f80fe0..43e835f 100644 >--- a/koha-tmpl/opac-tmpl/prog/en/modules/opac-authoritiessearchresultlist.tt >+++ b/koha-tmpl/opac-tmpl/prog/en/modules/opac-authoritiessearchresultlist.tt >@@ -15,7 +15,7 @@ > <h1>Authority search results</h1> > <div id="pages"> > [% IF ( displayprev ) %] >- <a href="opac-authorities-home.pl?startfrom=[% startfromprev %]&[% FOREACH searchdat IN searchdata %][% searchdat.term %]=[% searchdat.val |url %]&[% END %]resultsperpage=[% resultsperpage %]&type=opac&op=do_search&authtypecode=[% authtypecode %]&orderby=[% orderby %]"> >+ <a href="opac-authorities-home.pl?startfrom=[% startfromprev %]&[% FOREACH searchdat IN searchdata %][% searchdat.term %]=[% searchdat.val |url %]&[% END %]resultsperpage=[% resultsperpage %]&type=opac&op=do_search&authtypecode=[% authtypecode %]&orderby=[% orderby | html%]"> > << > </a> > [% END %] >@@ -23,11 +23,11 @@ > [% IF ( number.highlight ) %] > <span class="current">[% number.number %]</span> > [% ELSE %] >- <a href="opac-authorities-home.pl?startfrom=[% number.startfrom %]&[% FOREACH searchdat IN number.searchdata %][% searchdat.term %]=[% searchdat.val |url %]&[% END %]resultsperpage=[% resultsperpage %]&type=opac&op=do_search&authtypecode=[% authtypecode %]&orderby=[% orderby %]">[% number.number %]</a> >+ <a href="opac-authorities-home.pl?startfrom=[% number.startfrom %]&[% FOREACH searchdat IN number.searchdata %][% searchdat.term %]=[% searchdat.val |url %]&[% END %]resultsperpage=[% resultsperpage %]&type=opac&op=do_search&authtypecode=[% authtypecode %]&orderby=[% orderby |html %]">[% number.number %]</a> > [% END %] > [% END %] > [% IF ( displaynext ) %] >- <a href="opac-authorities-home.pl?startfrom=[% startfromnext %]&[% FOREACH searchdat IN searchdata %][% searchdat.term %]=[% searchdat.val |url %]&[% END %]&resultsperpage=[% resultsperpage %]&type=opac&op=do_search&authtypecode=[% authtypecode %]&orderby=[% orderby %]">>></a> >+ <a href="opac-authorities-home.pl?startfrom=[% startfromnext %]&[% FOREACH searchdat IN searchdata %][% searchdat.term %]=[% searchdat.val |url %]&[% END %]&resultsperpage=[% resultsperpage %]&type=opac&op=do_search&authtypecode=[% authtypecode %]&orderby=[% orderby |html%]">>></a> > [% END %] > </div> > <div id="results"> >-- >2.1.4
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 13609
:
35464
|
35469
|
35474
|
35476
| 35477