projects
/
koha.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
Bug 17028: Fix XSS in reserve/request.pl
[koha.git]
/
reserve
/
request.pl
diff --git
a/reserve/request.pl
b/reserve/request.pl
index
78d644b
..
73a519c
100755
(executable)
--- a/
reserve/request.pl
+++ b/
reserve/request.pl
@@
-195,6
+195,7
@@
if ($multihold) {
my $itemdata_enumchron = 0;
my @biblioloop = ();
foreach my $biblionumber (@biblionumbers) {
+ next unless $biblionumber =~ m|^\d+$|;
my %biblioloopiter = ();