20 Aug
2024
20 Aug
'24
12:51 a.m.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22223 --- Comment #45 from David Cook <dcook@prosentient.com.au> --- It looks like it's no longer an issue in the staff interface since we're now constructing this HTML using Javascript in koha-tmpl/intranet-tmpl/prog/en/includes/html_helpers/tables/items/catalogue_detail.inc and we're using our homemade escape function. I'd prefer we created the elements using objects rather than strings and using escape_str, but it escapes the XSS and doesn't double-encode a simple URL, so it seems good enough. The OPAC is still a problem. I'm going to try something... -- You are receiving this mail because: You are watching all bug changes.