From a2f1089ac2d78f48b30ba595b4169ea46a4cb842 Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Wed, 3 Aug 2016 08:49:10 +0100 Subject: [PATCH] [PASSED QA] Bug 17036: Fix XSS in circulation.pl Test plan: Enter the following in the "Check out" tab: "> => Without this patch you will see the alert => With this patch, no more alert Signed-off-by: Chris Cormack Signed-off-by: Katrin Fischer --- koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt index b305b85..4d3965c 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt @@ -538,7 +538,7 @@ $(document).ready(function() { [% IF ( message ) %] [% INCLUDE 'patron-toolbar.inc' %]

-No patron matched [% message %] +No patron matched [% message | html %]

[% END %] -- 1.9.1