This patch builds the patron search description more carefully to avoid XSS Test plan: 0. Apply the patch 1. Log into Koha and click on "Patrons" 2. Change the "Category" and "Library" to any option but "Any" and click "Search" 3. Type "test" into the data table "Search:" box 4. Note some text should appear on the screen similar to this content and format: Patrons found for: Anywhere: test Library=Centerville, Category=Board Signed-off-by: Owen Leonard <oleonard@myacpl.org> Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org> Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org> Signed-off-by: Lucas Gass <lucas@bywatersolutions.com> |
||
|---|---|---|
| .. | ||
| intranet-tmpl | ||
| opac-tmpl | ||