Bugzilla – Attachment 67085 Details for
Bug 19108
Stored XSS in multiple scripts
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 19108: (follow-up) Stored XSS in biblio_framework.pl
Bug-19108-follow-up-Stored-XSS-in-biblioframeworkp.patch (text/plain), 1.50 KB, created by
Jonathan Druart
on 2017-09-12 14:06:59 UTC
(
hide
)
Description:
Bug 19108: (follow-up) Stored XSS in biblio_framework.pl
Filename:
MIME Type:
Creator:
Jonathan Druart
Created:
2017-09-12 14:06:59 UTC
Size:
1.50 KB
patch
obsolete
>From f86b352f3e7bf87c09fb6b5128e75c7f4d441c18 Mon Sep 17 00:00:00 2001 >From: Jonathan Druart <jonathan.druart@bugs.koha-community.org> >Date: Tue, 12 Sep 2017 11:06:11 -0300 >Subject: [PATCH] Bug 19108: (follow-up) Stored XSS in biblio_framework.pl > >Prevent software error >Template process failed: undef error - text: filter not found at >/home/vagrant/kohaclone/C4/Templates.pm line 121. >--- > koha-tmpl/intranet-tmpl/prog/en/modules/admin/biblio_framework.tt | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > >diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/biblio_framework.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/admin/biblio_framework.tt >index 166663f2d2..9b81657a61 100644 >--- a/koha-tmpl/intranet-tmpl/prog/en/modules/admin/biblio_framework.tt >+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/admin/biblio_framework.tt >@@ -107,7 +107,7 @@ > <div class="dialog alert"> > [% IF biblios_use_this_framework %] > <h3>This framework cannot be deleted</h3> >- <p><strong><span class="ex">[% framework.frameworktext |text %] ([% framework.frameworkcode %])</span></strong></p> >+ <p><strong><span class="ex">[% framework.frameworktext |html %] ([% framework.frameworkcode %])</span></strong></p> > <p>The framework is used [% biblios_use_this_framework %] times.</p> > <form action="/cgi-bin/koha/admin/biblio_framework.pl" method="get"> > <button type="submit"><i class="fa fa-fw fa-arrow-left"></i> Return to frameworks</button> >-- >2.11.0
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 19108
:
65997
|
65998
|
65999
|
66000
|
66001
|
66002
|
66079
|
66080
|
66081
|
66082
|
66083
|
66084
|
66085
|
66442
|
66443
|
66444
|
66445
|
66446
|
66447
|
66448
| 67085