Bugzilla – Attachment 34267 Details for
Bug 13425
There is an xss vulnerability in 3.16, 3.18 and master in the opac and intranet facets
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 13425: Fix regression on deleting facets
Bug-13425-Fix-regression-on-deleting-facets.patch (text/plain), 1.17 KB, created by
Jonathan Druart
on 2014-12-10 08:39:32 UTC
(
hide
)
Description:
Bug 13425: Fix regression on deleting facets
Filename:
MIME Type:
Creator:
Jonathan Druart
Created:
2014-12-10 08:39:32 UTC
Size:
1.17 KB
patch
obsolete
>From f1e2fad1600f7155fa03d56aedb9fed876d092b0 Mon Sep 17 00:00:00 2001 >From: Jonathan Druart <jonathan.druart@biblibre.com> >Date: Wed, 10 Dec 2014 09:38:12 +0100 >Subject: [PATCH] Bug 13425: Fix regression on deleting facets > >Test plan: >Search for something >click on a facet with diacritic >click on another facet >remove the facet with diacritic >--- > opac/opac-search.pl | 3 ++- > 1 file changed, 2 insertions(+), 1 deletion(-) > >diff --git a/opac/opac-search.pl b/opac/opac-search.pl >index d7eaf9e..692d70b 100755 >--- a/opac/opac-search.pl >+++ b/opac/opac-search.pl >@@ -420,10 +420,11 @@ if ($operands[0] && !$operands[1]) { > > # limits are use to limit to results to a pre-defined category such as branch or language > my @limits = $cgi->param('limit'); >+@limits = map { uri_unescape($_) } @limits; > my @nolimits = $cgi->param('nolimit'); >+@nolimits = map { uri_unescape($_) } @nolimits; > my %is_nolimit = map { $_ => 1 } @nolimits; > @limits = grep { not $is_nolimit{$_} } @limits; >-@limits = map { uri_unescape($_) } @limits; > > if($params->{'multibranchlimit'}) { > my $multibranch = '('.join( " or ", map { "branch: $_ " } @{ GetBranchesInCategory( $params->{'multibranchlimit'} ) } ).')'; >-- >2.1.0
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 13425
:
34255
|
34256
|
34257
|
34258
|
34259
|
34260
|
34261
|
34262
|
34264
|
34265
|
34267
|
34273
|
34389
|
34496
|
34507
|
34603
|
34617
|
34618
|
34619
|
34636