http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9411 Hugh Davenport <hugh@davenport.net.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #14648|0 |1 is obsolete| | --- Comment #4 from Hugh Davenport <hugh@davenport.net.nz> --- Created attachment 14650 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=14650&action=edit bug 9411 Fix javascript evals to use parseInt and parseFloat The acq.js file used evals to parse the return text of ajax queries to determine what result to return. This is a bad thing, and can potentially cause security risks. This patch converts those eval calls to parseInt and parseFloat calls. Note: This patch depends on the patch in bug 4437 so there are no conflicts. Signed-off-by: Hugh Davenport <hugh@davenport.net.nz> -- You are receiving this mail because: You are watching all bug changes.