Bugzilla – Attachment 6412 Details for
Bug 6629
[security] insecure use of Cookie for language selection
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
[3.2.x] Bug 6629 vulnerability fix
32x-Bug-6629-vulnerability-fix.patch (text/plain), 750 bytes, created by
Chris Cormack
on 2011-11-25 18:20:43 UTC
(
hide
)
Description:
[3.2.x] Bug 6629 vulnerability fix
Filename:
MIME Type:
Creator:
Chris Cormack
Created:
2011-11-25 18:20:43 UTC
Size:
750 bytes
patch
obsolete
>From 1d920c4c29fba089cb6ff11dcd172feef113642a Mon Sep 17 00:00:00 2001 >From: Chris Cormack <chrisc@catalyst.net.nz> >Date: Fri, 25 Nov 2011 20:43:02 +1300 >Subject: [PATCH] [3.2.x] Bug 6629 vulnerability fix > >--- > C4/Output.pm | 1 + > 1 files changed, 1 insertions(+), 0 deletions(-) > >diff --git a/C4/Output.pm b/C4/Output.pm >index a6cb984..5851cb4 100644 >--- a/C4/Output.pm >+++ b/C4/Output.pm >@@ -160,6 +160,7 @@ sub themelanguage { > if $http_accept_language; > # But, if there's a cookie set, obey it > $lang = $query->cookie('KohaOpacLanguage') if (defined $query and $query->cookie('KohaOpacLanguage')); >+ $lang =~ s/[^a-zA-Z_-]*//g; > # Fall back to English > my @languages; > if ($interface eq 'intranet') { >-- >1.7.5.4
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 6629
:
6398
|
6399
|
6400
|
6401
|
6402
|
6403
|
6404
|
6405
|
6406
|
6411
| 6412 |
6422
|
6423
|
6424
|
6427
|
6428
|
6432