Bugzilla – Attachment 53667 Details for
Bug 16969
Vulnerability warning for opac/opac-memberentry.pl
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 16969 cgi->param used in list context in opac-memberentry.pl
Bug-16969-cgi-param-used-in-list-context-in-opac-m.patch (text/plain), 958 bytes, created by
Chris Cormack
on 2016-07-24 07:20:51 UTC
(
hide
)
Description:
Bug 16969 cgi->param used in list context in opac-memberentry.pl
Filename:
MIME Type:
Creator:
Chris Cormack
Created:
2016-07-24 07:20:51 UTC
Size:
958 bytes
patch
obsolete
>From c63f0c1ef3863ac00f3c67c4fe1d1e54e8f42d9c Mon Sep 17 00:00:00 2001 >From: Chris Cormack <chrisc@catalyst.net.nz> >Date: Sun, 24 Jul 2016 19:18:51 +1200 >Subject: [PATCH] Bug 16969 cgi->param used in list context in > opac-memberentry.pl > >To test >1/ Hit the page, notice the warning in the log >2/ Apply patch >3/ Hit page, notice no warning in the log >4/ Test functionality all still works >--- > opac/opac-memberentry.pl | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > >diff --git a/opac/opac-memberentry.pl b/opac/opac-memberentry.pl >index b73ee1b..86f3850 100755 >--- a/opac/opac-memberentry.pl >+++ b/opac/opac-memberentry.pl >@@ -360,7 +360,7 @@ sub ParseCgiForBorrower { > foreach ( $cgi->param ) { > if ( $_ =~ '^borrower_' ) { > my ($key) = substr( $_, 9 ); >- $borrower{$key} = $scrubber->scrub( $cgi->param($_) ); >+ $borrower{$key} = $scrubber->scrub( scalar $cgi->param($_) ); > } > } > >-- >2.8.1
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=53667">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 16969
:
53667
|
53668
|
53669