From: Jeff Davis <jdavis@sitka.bclibraries.ca>
Date: Mon, 9 Nov 2020 23:17:07 +0000 (-0800)
Subject: LP#1902965: change format type in XML transform to avoid XSS in SuperCat
X-Git-Url: https://old-git.evergreen-ils.org/?a=commitdiff_plain;h=2f3c4560f33a9045e01f05d56b9c4fa6befc4c0b;p=contrib%2FConifer.git

LP#1902965: change format type in XML transform to avoid XSS in SuperCat

Signed-off-by: Jeff Davis <jdavis@sitka.bclibraries.ca>
Signed-off-by: Jason Boyer <JBoyer@equinoxinitiative.org>
Signed-off-by: Jason Stephenson <jason@sigio.com>
Signed-off-by: Galen Charlton <gmc@equinoxinitiative.org>
Signed-off-by: Jane Sandberg <sandbej@linnbenton.edu>
---

diff --git a/Open-ILS/xsl/MARC21slim2ATOM.xsl b/Open-ILS/xsl/MARC21slim2ATOM.xsl
index 05914d9989..0e6e8009de 100644
--- a/Open-ILS/xsl/MARC21slim2ATOM.xsl
+++ b/Open-ILS/xsl/MARC21slim2ATOM.xsl
@@ -67,7 +67,7 @@
 			</xsl:for-each>
 
 			<xsl:for-each select="marc:datafield[@tag=260]">
-				<rights type="html">
+				<rights>
 					<xsl:text>&#169; </xsl:text>
 					<xsl:call-template name="subfieldSelect">
 						<xsl:with-param name="codes">c</xsl:with-param>