@@ -, +, @@ installed is < 4.08, it will allow us to move the wrong ->param calls to ->multi_param without waiting for everybody to upgrade. # and vulnerable --- C4/Context.pm | 6 ++++++ 1 file changed, 6 insertions(+) --- a/C4/Context.pm +++ a/C4/Context.pm @@ -76,6 +76,12 @@ BEGIN { if ($ENV{KOHA_BACKTRACES}) { $main::SIG{__DIE__} = \&CGI::Carp::confess; } + if (!defined($CGI::VERSION) || $CGI::VERSION < 4.08) { + no warnings 'redefine'; + *CGI::multi_param = \&CGI::param; + use warnings 'redefine'; + $CGI::LIST_CONTEXT_WARN = 0; + } } # else there is no browser to send fatals to! # Check if there are memcached servers set --