From a276aec2c036f204f37c8fd89ad914c66d142a65 Mon Sep 17 00:00:00 2001 From: Marcel de Rooy Date: Fri, 17 Jan 2020 10:08:57 +0000 Subject: [PATCH] Hack MARC21slim2intranetDetail.xsl Content-Type: text/plain; charset=utf-8 Let's print etc/passwd on the detail page (only for staff :) Note that this does not generate a log entry but depending on your LibXML version, your koha-config variable koha_xslt_security and applying the follow-up "Disable expand entities unless explicitly enabled", the contents of your /etc/passwd may be visible on the staff detail page. When you applied all patches, the only way to get the passwd info on the form should be to enable expand_entities in koha-conf as shown below. Obviously, this is not recommended. By default, this setting is disabled even when missing in koha-conf. 1 --- koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2intranetDetail.xsl | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2intranetDetail.xsl b/koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2intranetDetail.xsl index a1489bbe50..412b7c87b6 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2intranetDetail.xsl +++ b/koha-tmpl/intranet-tmpl/prog/en/xslt/MARC21slim2intranetDetail.xsl @@ -1,6 +1,6 @@ -]> +]> @@ -12,7 +12,7 @@ exclude-result-prefixes="marc items str"> - + &secret; -- 2.11.0