https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25639

David Cook <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #7 from David Cook <[email protected]> ---
Here's a thought:

Does it have to be in the HTML? (We're not displaying the HTML nor are we
POSTing a hidden field, so this just seems a bit hacky.)

Since we know what the search query is when we're building the HTTP response,
we could possibly just put it in a Javascript variable. 

You could store the 3 strings in a JSON object, and since we'd build the JSON
server-side, it would be easy to validate the data to prevent XSS
vulnerabilities. 

Anyway, just a thought. It could be a cleaner way of doing it.

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to