What I did to test was to edit 2 Vivaldi records in the concerto database. I changed "6 Concertos" title to "The Hidden Concertos" and then modified "Vivaldi, The Four Seasons" to "<script>alert('look out');</script> The Four Seasons."
Before applying Galen's patch the title of "The Hidden Concertos" was hidden in both the bootstrap OPAC and the traditional OPAC.
After applying Galen's patch, the title showed.
In neither case did an alert pop up for "The Four Seasons."
I have tested Galen's patch and added my signoff at https:/ /git.evergreen- ils.org/ ?p=working/ Evergreen. git;a=shortlog; h=refs/ heads/collab/ dyrcona/ lp1930933_ reveal_ what_was_ hidden
What I did to test was to edit 2 Vivaldi records in the concerto database. I changed "6 Concertos" title to "The Hidden Concertos" and then modified "Vivaldi, The Four Seasons" to "<script> alert(' look out');</script> The Four Seasons."
Before applying Galen's patch the title of "The Hidden Concertos" was hidden in both the bootstrap OPAC and the traditional OPAC.
After applying Galen's patch, the title showed.
In neither case did an alert pop up for "The Four Seasons."