From 96dcbdb1d3c6ba3ef8b15e11bd47980056860216 Mon Sep 17 00:00:00 2001 From: Chris Cormack Date: Fri, 25 Nov 2011 20:38:35 +1300 Subject: [PATCH] [3.4.x] Bug 6629 fix for vulnerability --- C4/Templates.pm | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/C4/Templates.pm b/C4/Templates.pm index eaec07d..2820af1 100644 --- a/C4/Templates.pm +++ b/C4/Templates.pm @@ -180,7 +180,7 @@ sub themelanguage_lite { # But, if there's a cookie set, obey it $lang = $query->cookie('KohaOpacLanguage') if ( defined $query and $query->cookie('KohaOpacLanguage') ); - + $lang =~ s/[^a-zA-Z_-]*//; # Fall back to English my @languages; if ( $interface eq 'intranet' ) { -- 1.7.5.4