From bugzilla-daemon@bugs.koha-community.org Fri Apr  3 15:14:15 2020
From: bugzilla-daemon@bugs.koha-community.org
To: koha-bugs@lists.koha-community.org
Subject: [Koha-bugs] [Bug 4461] Context-sensitive report a problem screen
Date: Fri, 03 Apr 2020 13:14:14 +0000
Message-ID: <bug-4461-70-NIp0pGwqPM@https.bugs.koha-community.org/bugzilla3/>
In-Reply-To: <bug-4461-70@https.bugs.koha-community.org/bugzilla3/>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1218179272569295263=="

--===============1218179272569295263==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3D4461

--- Comment #200 from Jonathan Druart <jonathan.druart@bugs.koha-community.or=
g> ---
Created attachment 102385
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=3D102385&action=
=3Dedit
Bug 4461: Correctly deal with encoding/escaping chars

This patch deals (hopefully) correctly with encoding and escaping chars.
It also remove OPACBaseURL from the url stored in DB, and readd is on
display, to avoid possible attacks.

Test plan:
Go to the authority search
fill term with something hacky
<script>alert('booh!')</script>And =C5=9C=E2=99=A5m=E2=82=AC E=E2=98=85tr=E2=
=82=B3
Search
Click the "Report a problem" link
Fill the form and make sure the url is displayed correctly
submit
Check problem_reports.problempage in DB =3D> Should be correctly displayed
Go to staff interface, "OPAC problem reports"
=3D> Confirm the link is correctly display
Click it
=3D> Confirm that you are at the OPAC, and the URL is correct

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

--=20
You are receiving this mail because:
You are watching all bug changes.

--===============1218179272569295263==--