From 804ac02079f31f8c78eb3b5f2e570fe6e5f7df9c Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Tue, 2 Aug 2016 14:51:49 +0100 Subject: [PATCH] [PASSED QA] Bug 17026: Fix XSS in serials/checkexpiration.pl Test plan: Hit: /serials/checkexpiration.pl?title=">&date=12/02/2002 /serials/checkexpiration.pl?issn=">&date=12/02/2002 => Without this patch you will see the alert => With this patch, no more alert Signed-off-by: Chris Cormack Signed-off-by: Katrin Fischer --- .../intranet-tmpl/prog/en/modules/serials/checkexpiration.tt | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt index 8b69320..5e573ff 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/serials/checkexpiration.tt @@ -49,10 +49,10 @@
  1. -
  2. +
  3. -
  4. + [% IF (branches_loop.size) %]