Summary: | HTML tags in titles not escaped in many places | ||
---|---|---|---|
Product: | Koha | Reporter: | Galen Charlton <gmcharlt> |
Component: | Templates | Assignee: | Owen Leonard <oleonard> |
Status: | CLOSED FIXED | QA Contact: | |
Severity: | critical | ||
Priority: | P3 | CC: | chris, jcamins |
Version: | Main | ||
Hardware: | All | ||
OS: | All | ||
URL: | circ/returns.pl | ||
Change sponsored?: | --- | Patch complexity: | --- |
Documentation contact: | Documentation submission: | ||
Text to go in the release notes: | Version(s) released in: | ||
Circulation function: | |||
Bug Depends on: | 3652 | ||
Bug Blocks: | |||
Attachments: |
An illustration of a potential "exploit"
Some fixes Some fixes |
Description
Chris Cormack
2010-05-21 00:53:19 UTC
Seems to have been pushed years ago. |