Bug 42360: [25.05] Also validate sep param

Signed-off-by: Sanjar Tulkinov Anvar o'g'li <sanjarbiy11@gmail.com>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Signed-off-by: Wainui Witika-Park <wainuiwitikapark@catalyst.net.nz>
This commit is contained in:
David Cook 2026-05-22 04:05:16 +00:00 committed by Wainui Witika-Park
parent 31ef896bff
commit 1fe542cb2d
No known key found for this signature in database
GPG Key ID: 2D0A6AB5DAF1B78D
1 changed files with 8 additions and 1 deletions

View File

@ -119,7 +119,14 @@ if ($basename_input) {
#NOTE: Ideally it would be nice to validate the Filter parameter,
#but that would take a fair bit of work...
our $sep = C4::Context->csv_delimiter( scalar $input->param("sep") );
#NOTE: Validate sep parameter
our $sep = C4::Context->csv_delimiter();
my $sep_input = scalar $input->param("sep");
my $delimiter_choices = GetDelimiterChoices();
my %allowed_seps = map { $_ => 1 } @{ $delimiter_choices->{values} };
if ( $sep_input && $allowed_seps{$sep_input} ) {
$sep = $sep_input;
}
$template->param(
do_it => $do_it,