| Summary: | CGI::param called in list context from cataloguing/moveitem.pl | ||
|---|---|---|---|
| Product: | Koha | Reporter: | Marcel de Rooy <m.de.rooy> |
| Component: | Architecture, internals, and plumbing | Assignee: | Marcel de Rooy <m.de.rooy> |
| Status: | Pushed to stable --- | QA Contact: | Lucas Gass (lukeg) <lucas> |
| Severity: | minor | ||
| Priority: | P5 - low | CC: | fridolin.somers, lucas |
| Version: | Main | ||
| Hardware: | All | ||
| OS: | All | ||
| GIT URL: | Initiative type: | --- | |
| Sponsorship status: | --- | Comma delimited list of Sponsors: | |
| Crowdfunding goal: | 0 | Patch complexity: | Trivial patch |
| Documentation contact: | Documentation submission: | ||
| Text to go in the release notes: | Version(s) released in: |
25.05.00,24.11.08
|
|
| Circulation function: | |||
| Attachments: |
Bug 39213: Force scalar on query param barcode
Bug 39213: Force scalar on query param barcode |
||
Created attachment 178813 [details] [review] Bug 39213: Force scalar on query param barcode Test plan: Read the patch. Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Not the first patch in this series ;) Trivial change, self SO. Note: The line number came from 23.11 Created attachment 178852 [details] [review] Bug 39213: Force scalar on query param barcode Test plan: Read the patch. Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: Lucas Gass <lucas@bywatersolutions.com> Pushed for 25.05! Well done everyone, thank you! Pushed to 24.11.x for 24.11.08 |
CGI::param called in list context from /usr/share/koha/cataloguing/moveitem.pl line 38, this can lead to vulnerabilities. See the warning in "Fetching the value or values of a single named parameter" at /usr/share/perl5/CGI.pm line 415. # The barcode of the item to move my $barcode = barcodedecode($query->param('barcode'));