Bugzilla – Attachment 1482 Details for
Bug 3652
XSS vulnerabilities
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Patch for opac-search-history.tmpl
0007-Bug-3652-Fixes-XSS-vulnerabilities-and-XTHML-errors.patch (text/plain), 1.67 KB, created by
Chris Cormack
on 2010-02-16 00:08:00 UTC
(
hide
)
Description:
Patch for opac-search-history.tmpl
Filename:
MIME Type:
Creator:
Chris Cormack
Created:
2010-02-16 00:08:00 UTC
Size:
1.67 KB
patch
obsolete
>From 26144e907f93282796b447c1b60532ce40a59cb7 Mon Sep 17 00:00:00 2001 >From: Garry Collum <gcollum@gmail.com> >Date: Mon, 15 Feb 2010 19:14:43 -0500 >Subject: [PATCH] Bug 3652: Fixes XSS vulnerabilities and XTHML errors in opac-search-history.tmpl >Content-Type: text/plain; charset="utf-8" > >--- > .../prog/en/modules/opac-search-history.tmpl | 4 ++-- > 1 files changed, 2 insertions(+), 2 deletions(-) > >diff --git a/koha-tmpl/opac-tmpl/prog/en/modules/opac-search-history.tmpl b/koha-tmpl/opac-tmpl/prog/en/modules/opac-search-history.tmpl >index 657ad14..f129925 100644 >--- a/koha-tmpl/opac-tmpl/prog/en/modules/opac-search-history.tmpl >+++ b/koha-tmpl/opac-tmpl/prog/en/modules/opac-search-history.tmpl >@@ -46,7 +46,7 @@ > <!-- TMPL_LOOP NAME="recentSearches" --> > <tr> > <td><!-- TMPL_VAR NAME="time" --></td> >- <td><a href="/cgi-bin/koha/opac-search.pl?<!-- TMPL_VAR NAME="query_cgi" -->"><!-- TMPL_VAR NAME="query_desc" ESCAPE="html" --></a></td> >+ <td><a href="/cgi-bin/koha/opac-search.pl?<!-- TMPL_VAR NAME="query_cgi" ESCAPE="html" -->"><!-- TMPL_VAR NAME="query_desc" ESCAPE="html" --></a></td> > <td><!-- TMPL_VAR NAME="total" --></td> > </tr> > <!-- /TMPL_LOOP --> >@@ -64,7 +64,7 @@ > <!-- TMPL_LOOP NAME="previousSearches" --> > <tr> > <td><!-- TMPL_VAR NAME="time" --></td> >- <td><a href="/cgi-bin/koha/opac-search.pl?<!-- TMPL_VAR NAME="query_cgi" -->"><!-- TMPL_VAR NAME="query_desc" --></a></td> >+ <td><a href="/cgi-bin/koha/opac-search.pl?<!-- TMPL_VAR NAME="query_cgi" ESCAPE="html" -->"><!-- TMPL_VAR NAME="query_desc" ESCAPE="html" --></a></td> > <td><!-- TMPL_VAR NAME="total" --></td> > </tr> > <!-- /TMPL_LOOP --> >-- >1.5.6.5 >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 3652
:
1482
|
2364
|
2784
|
2785
|
2838
|
12728
|
12729
|
12730
|
12737
|
12738
|
12740
|
12741
|
12807
|
12808
|
12809
|
12820
|
12823
|
12835
|
12836
|
12876
|
12926