| Summary: | HTML and URL escape missing in OPAC templates | ||
|---|---|---|---|
| Product: | Koha | Reporter: | Fridolin Somers <fridolin.somers> |
| Component: | OPAC | Assignee: | Fridolin Somers <fridolin.somers> |
| Status: | CLOSED FIXED | QA Contact: | Paul Poulain <paul.poulain> |
| Severity: | normal | ||
| Priority: | P5 - low | CC: | chris, liz, paul.poulain |
| Version: | 3.6 | ||
| Hardware: | All | ||
| OS: | All | ||
| Change sponsored?: | --- | Patch complexity: | Trivial patch |
| Documentation contact: | Documentation submission: | ||
| Text to go in the release notes: | Version(s) released in: | ||
| Circulation function: | |||
| Attachments: |
Proposed patch
[SIGNED-OFF] Bug 8973: HTML and URL escape missing in OPAC templates Bug 8973 [3.6.x] HTML and URL escape missing in OPAC templates |
||
|
Description
Fridolin Somers
2012-10-26 08:48:27 UTC
Created attachment 13070 [details] [review] Proposed patch Created attachment 13098 [details] [review] [SIGNED-OFF] Bug 8973: HTML and URL escape missing in OPAC templates Signed-off-by: Owen Leonard <oleonard@myacpl.org> QA comment: * 3 lines patch that fix a bug that could even be exploited for XSS injection * passes koha-qa.pl * no string change passed QA Patch pushed to master Pushed to 3.8.x will be in 3.8.7 This does not apply for 3.6.x, please send a 3.6.x patch if it is needed. Created attachment 13514 [details] [review] Bug 8973 [3.6.x] HTML and URL escape missing in OPAC templates Adding HTML filter to some template variables which require them. This patch is for 3.6.x, based on Fridolyn SOMERS patch for master. I wanted to signoff 3.6 patch, but patch is already pushed in 3.6.x : http://git.koha-community.org/gitweb/?p=koha.git;a=commit;h=b28598369ac95a971293ec79157593bb22b38ee7 |