CGI::param called in list context from /usr/share/koha/cataloguing/moveitem.pl line 38, this can lead to vulnerabilities. See the warning in "Fetching the value or values of a single named parameter" at /usr/share/perl5/CGI.pm line 415. # The barcode of the item to move my $barcode = barcodedecode($query->param('barcode'));
Created attachment 178813 [details] [review] Bug 39213: Force scalar on query param barcode Test plan: Read the patch. Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Not the first patch in this series ;) Trivial change, self SO.
Note: The line number came from 23.11
Created attachment 178852 [details] [review] Bug 39213: Force scalar on query param barcode Test plan: Read the patch. Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
Pushed for 25.05! Well done everyone, thank you!