From 2c101d200aec33713db77fe1374cbd7b10fe674c Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Wed, 3 Aug 2016 08:49:10 +0100 Subject: [PATCH] Bug 17036: Fix XSS in circulation.pl Test plan: Enter the following in the "Check out" tab: "> => Without this patch you will see the alert => With this patch, no more alert --- koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt index b02851f..7435f8a 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt @@ -538,7 +538,7 @@ $(document).ready(function() { [% IF ( message ) %] [% INCLUDE 'patron-toolbar.inc' %]

-No patron matched [% message %] +No patron matched [% message | html %]

[% END %] -- 2.8.1