[Koha-patches] [PATCH] Quick fix to catch some instances of XSS vulnerability, there will be more probably, thanks for the heads up Mark

[Chris Cormack]

---
 koha-tmpl/opac-tmpl/prog/en/includes/masthead.inc |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/koha-tmpl/opac-tmpl/prog/en/includes/masthead.inc 
b/koha-tmpl/opac-tmpl/prog/en/includes/masthead.inc
index 4c25231..997c0a5 100644
--- a/koha-tmpl/opac-tmpl/prog/en/includes/masthead.inc
+++ b/koha-tmpl/opac-tmpl/prog/en/includes/masthead.inc
@@ -136,11 +136,11 @@
 <!-- /TMPL_IF -->
 </div>
 </div>
-<div id="breadcrumbs" class="yui-g"><!-- TMPL_IF NAME="searchdesc" --><p><!-- 
TMPL_IF name="total" --><strong>&ldquo;<!-- TMPL_VAR NAME="query_desc" --><!-- 
TMPL_VAR NAME="limit_desc" -->&rdquo; </strong>returned <!-- TMPL_VAR 
NAME="total" --> results. <!-- TMPL_IF NAME="related" --> (related searches: 
<!-- TMPL_LOOP NAME="related" --><!-- TMPL_VAR NAME="related_search" --><!-- 
/TMPL_LOOP -->). <!-- /TMPL_IF -->
+<div id="breadcrumbs" class="yui-g"><!-- TMPL_IF NAME="searchdesc" --><p><!-- 
TMPL_IF name="total" --><strong>&ldquo;<!-- TMPL_VAR NAME="query_desc" 
ESCAPE="HTML"--><!-- TMPL_VAR NAME="limit_desc" ESCAPE="HTML"-->&rdquo; 
</strong>returned <!-- TMPL_VAR NAME="total" ESCAPE="HTML"--> results. <!-- 
TMPL_IF NAME="related" --> (related searches: <!-- TMPL_LOOP NAME="related" 
--><!-- TMPL_VAR NAME="related_search" --><!-- /TMPL_LOOP -->). <!-- /TMPL_IF 
-->
 <a href="<!-- TMPL_VAR NAME="OPACBaseURL" -->/cgi-bin/koha/opac-search.pl?<!-- 
TMPL_VAR name="query_cgi" ESCAPE="HTML" --><!-- TMPL_VAR NAME="limit_cgi"  
ESCAPE="HTML" -->&amp;format=rss2"><img 
src="/opac-tmpl/prog/images/feed-icon-16x16.png" alt="Subscribe to this search" 
title="Subscribe to this search" border="0" /></a><!-- TMPL_ELSE --><!-- 
TMPL_IF NAME="searchdesc" -->
 <strong>No Result found !</strong>
 <p>
-    No results match your search for <span style="font-weight: 
bold;">&ldquo;<!-- TMPL_VAR NAME="query_desc" --><!-- TMPL_VAR 
NAME="limit_desc" -->&rdquo;</span> in <!-- TMPL_VAR NAME="LibraryName" --> 
Catalog. <a href="<!-- TMPL_VAR NAME="OPACBaseURL" 
-->/cgi-bin/koha/opac-search.pl?<!-- TMPL_VAR name="query_cgi" ESCAPE="HTML" 
--><!-- TMPL_VAR NAME="limit_cgi"  ESCAPE="HTML" -->&amp;format=rss2"><img 
src="/opac-tmpl/prog/images/feed-icon-16x16.png" alt="Subscribe to this search" 
title="Subscribe to this search" border="0" /></a>
+    No results match your search for <span style="font-weight: 
bold;">&ldquo;<!-- TMPL_VAR NAME="query_desc" ESCAPE="HTML" --><!-- TMPL_VAR 
NAME="limit_desc" ESCAPE="HTML"-->&rdquo;</span> in <!-- TMPL_VAR 
NAME="LibraryName" --> Catalog. <a href="<!-- TMPL_VAR NAME="OPACBaseURL" 
-->/cgi-bin/koha/opac-search.pl?<!-- TMPL_VAR name="query_cgi" ESCAPE="HTML" 
--><!-- TMPL_VAR NAME="limit_cgi"  ESCAPE="HTML" -->&amp;format=rss2"><img 
src="/opac-tmpl/prog/images/feed-icon-16x16.png" alt="Subscribe to this search" 
title="Subscribe to this search" border="0" /></a>
 </p>
 <!-- TMPL_ELSE --><strong> No result found !</strong>
 <p>
-- 
1.5.6.3

_______________________________________________
Koha-patches mailing list
Koha-patches@lists.koha.org
http://lists.koha.org/mailman/listinfo/koha-patches