From 8a2fe15ed9b6c7525749dafe4c38f583d7508b81 Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Thu, 26 May 2016 12:03:55 +0100 Subject: [PATCH] Bug 16599: Fix XSS in opac-shareshelf.pl Content-Type: text/plain; charset=utf-8 Test plan: - Create a list with the name "" - On the shelf list, click on share => Without this patch you will see the JS alert => With this patch applied you won't see it Reported by Kaybee at Dionach Signed-off-by: Chris Cormack Signed-off-by: Marcel de Rooy --- koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shareshelf.tt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shareshelf.tt b/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shareshelf.tt index 8a9de13..fe4179b 100644 --- a/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shareshelf.tt +++ b/koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shareshelf.tt @@ -50,7 +50,7 @@
    -
  1. [% shelfname %]
    2. +
  2. [% shelfname | html %]
  3. @@ -67,7 +67,7 @@ [% ELSIF op=='conf_invite' %]
    [% IF approvedaddress %] -

    An invitation to share list [% shelfname %] will be sent shortly to [% approvedaddress %].

    +

    An invitation to share list [% shelfname | html %] will be sent shortly to [% approvedaddress %].

    [% END %] [% IF failaddress %]

    Something went wrong while processing the following addresses. Please check them. These are: [% failaddress %]

    -- 1.7.10.4