[Koha-bugs] [Bug 13618] Prevent XSS in the Staff Client and the OPAC

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 --- Comment #250 from Marcel de Rooy <m.de.rooy@rijksmuseum.nl> --- Lesson pasted from bug 21293: All occurrences of [% var = something | html %] are error prone. If something is not a string, but an object, array, hash etc., we are in trouble. This probably needs more attention since we are passing objects to templates in more scripts. -- You are receiving this mail because: You are watching all bug changes.