From 1d920c4c29fba089cb6ff11dcd172feef113642a Mon Sep 17 00:00:00 2001 From: Chris Cormack Date: Fri, 25 Nov 2011 20:43:02 +1300 Subject: [PATCH] [3.2.x] Bug 6629 vulnerability fix --- C4/Output.pm | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/C4/Output.pm b/C4/Output.pm index a6cb984..5851cb4 100644 --- a/C4/Output.pm +++ b/C4/Output.pm @@ -160,6 +160,7 @@ sub themelanguage { if $http_accept_language; # But, if there's a cookie set, obey it $lang = $query->cookie('KohaOpacLanguage') if (defined $query and $query->cookie('KohaOpacLanguage')); + $lang =~ s/[^a-zA-Z_-]*//g; # Fall back to English my @languages; if ($interface eq 'intranet') { -- 1.7.5.4