https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15814
Victor Grousset/tuxayo <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|normal |major --- Comment #2 from Victor Grousset/tuxayo <[email protected]> --- Still happens on master as of today. Also, as a consequence, it's vulnerable to XSS. Putting "<script>alert(123)</script>" in the description works. Idea to fix: escape in the template with replace() -- You are receiving this mail because: You are watching all bug changes. _______________________________________________ Koha-bugs mailing list [email protected] http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
