Summary: | HTML tags in titles not escaped in many places | ||
---|---|---|---|
Product: | Koha | Reporter: | Galen Charlton <gmcharlt> |
Component: | Templates | Assignee: | Owen Leonard <oleonard> |
Status: | CLOSED FIXED | QA Contact: | |
Severity: | critical | ||
Priority: | P3 | CC: | chris, jcamins |
Version: | Main | ||
Hardware: | All | ||
OS: | All | ||
URL: | circ/returns.pl | ||
GIT URL: | Change sponsored?: | --- | |
Patch complexity: | --- | Documentation contact: | |
Documentation submission: | Text to go in the release notes: | ||
Version(s) released in: | Circulation function: | ||
Bug Depends on: | 3652 | ||
Bug Blocks: | |||
Attachments: |
An illustration of a potential "exploit"
Some fixes Some fixes |
Description
Chris Cormack
2010-05-21 00:53:19 UTC
Seems to have been pushed years ago. |