From 0e0fcd1d21a36d4085f7b14abc17628762fd7d94 Mon Sep 17 00:00:00 2001 From: Chris Cormack Date: Tue, 9 Oct 2012 14:11:10 +1300 Subject: [PATCH] [SIGNED-OFF] Bug 3652: XSS vulnerability in page numbering Signed-off-by: Katrin Fischer Confirmed the problem with test plan on the bug and checked that paging works correctly after the patch. --- .../opac-tmpl/prog/en/includes/page-numbers.inc | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/koha-tmpl/opac-tmpl/prog/en/includes/page-numbers.inc b/koha-tmpl/opac-tmpl/prog/en/includes/page-numbers.inc index 738c0c9..ff9b11c 100644 --- a/koha-tmpl/opac-tmpl/prog/en/includes/page-numbers.inc +++ b/koha-tmpl/opac-tmpl/prog/en/includes/page-numbers.inc @@ -1,7 +1,6 @@ [% IF ( PAGE_NUMBERS ) %]
- [% IF ( previous_page_offset ) %]<< Previous[% END %] - [% FOREACH PAGE_NUMBER IN PAGE_NUMBERS %][% IF ( PAGE_NUMBER.highlight ) %][% PAGE_NUMBER.pg %][% ELSE %] [% PAGE_NUMBER.pg %][% END %] + [% IF ( previous_page_offset ) %]<< Previous[% END %] + [% FOREACH PAGE_NUMBER IN PAGE_NUMBERS %][% IF ( PAGE_NUMBER.highlight ) %][% PAGE_NUMBER.pg %][% ELSE %] [% PAGE_NUMBER.pg %][% END %] [% END %] - [% IF ( next_page_offset ) %]Next >>[% END %] -
[% END %] + [% IF ( next_page_offset ) %]Next >>[% END %] [% END %] -- 1.7.9.5