gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bug 40766: [24.05.x] Prevent XSS on set-library 

Signed-off-by: Paul Derscheid <paul.derscheid@lmscloud.de>
This commit is contained in:
Lucas Gass 2025-09-25 16:41:22 +00:00 committed by Paul Derscheid
parent 78b0a04d6a
commit 68ed159703
No known key found for this signature in database
GPG Key ID: C25F9FD44CED595B
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
koha-tmpl/intranet-tmpl/prog/en/modules/circ/set-library.tt
View File

@ -95,10 +95,10 @@
[% END %]
<fieldset class="action">
<input type="submit" class="btn btn-primary" value="Submit" />
<a class="cancel" id="cancel_set_library" href="[% referer or '/cgi-bin/koha/mainpage.pl' %]">Cancel</a>
<a class="cancel" id="cancel_set_library" href="[% ( referer or '/cgi-bin/koha/mainpage.pl' ) | url %]">Cancel</a>
</fieldset>
<div class="noshow">
<input type="hidden" name="oldreferer" value="[% referer or "/cgi-bin/koha/mainpage.pl" %]" />
<input type="hidden" name="oldreferer" value="[% ( referer or '/cgi-bin/koha/mainpage.pl' ) | url %]" />
</div>
</form>
<!-- /updated -->