https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39866

--- Comment #6 from Marcel de Rooy <[email protected]> ---
Created attachment 182855
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=182855&action=edit
Bug 39866: (QA follow-up) Rudimentary validation of line/column

Prevent SQL injection.

Note: output_error in Output.pm needs further attention, but out
of scope here. (The error passed gets replaced by 404 here too.)

Test plan:
Pass something else than table.field in Line or Column URL param.
(Manipulate URL.)
You should be redirected to 404 error instead of 500.

Signed-off-by: Marcel de Rooy <[email protected]>

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to