From ba1e87c8c0b56de86d969b8200436f2bbbd9284d Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Tue, 2 Aug 2016 14:51:49 +0100 Subject: [PATCH] Bug 17026: Fix XSS in serials/checkexpiration.pl Test plan: Hit: /serials/checkexpiration.pl?title=">&date=12/02/2002 /serials/checkexpiration.pl?issn=">&date=12/02/2002 => Without this patch you will see the alert => With this patch, no more alert --- .../intranet-tmpl/prog/en/modules/serials/checkexpiration.tt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt index 8b69320..5e573ff 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt @@ -49,10 +49,10 @@
  1. -
  2. +
  3. -
  4. + [% IF (branches_loop.size) %]