From c967579fe2dd14bd05845d26c46129e7f0f15284 Mon Sep 17 00:00:00 2001 From: David Cook Date: Mon, 18 Nov 2024 04:14:37 +0000 Subject: [PATCH] Bug 38468: Add double quotes to some template strings This change adds double quotes to some template strings where quotes are missing all together or single quotes are used incorrectly. Test plan: 0. Apply the patch 1. Go to http://localhost:8081/cgi-bin/koha/catalogue/search.pl?q=test 2. Click on "Gairm" 3. Use the shelf browser to go to the next result 4. Note that everything loads correctly 5. To test that the security hole has been fixed, try some of the proof-of-concept attacks provided for biblionumber and searchid --- koha-tmpl/intranet-tmpl/prog/en/includes/catalog-strings.inc | 4 ++-- koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/detail.tt | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/includes/catalog-strings.inc b/koha-tmpl/intranet-tmpl/prog/en/includes/catalog-strings.inc index 6ea79d927a..510c2baf35 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/includes/catalog-strings.inc +++ b/koha-tmpl/intranet-tmpl/prog/en/includes/catalog-strings.inc @@ -2,7 +2,7 @@