app/design/frontend/rwd/default/template/checkout/cart.phtml
The SUPEE-6285 V2 Patch adds the quoteEscape()
function to take care of the XSS issue.
If you are running 1.9.2.0, it is already patched with SUPEE-5344, SUPEE-5994 and SUPEE-6285. The Continue Shopping button is escaped to prevent XSS as follows (as extracted from Magento 1.9.2.0 archive file):
<?php if($this->getContinueShoppingUrl()): ?>
<button type="button" title="<?php echo $this->quoteEscape($this->__('Continue Shopping')) ?>" class="button2 btn-continue" onclick="setLocation('<?php echo Mage::helper('core')->quoteEscape($this->getContinueShoppingUrl()) ?>')"><span><span><?php echo $this->__('Continue Shopping') ?></span></span></button>
<?php endif; ?>
The code in 1.9.1.1 allows for XSS and is as follows (as extracted from Magento 1.9.1.1 archive file):
<?php if($this->getContinueShoppingUrl()): ?>
<button type="button" title="<?php echo $this->__('Continue Shopping') ?>" class="button2 btn-continue" onclick="setLocation('<?php echo $this->getContinueShoppingUrl() ?>')"><span><span><?php echo $this->__('Continue Shopping') ?></span></span></button>
<?php endif; ?>
What the SUPEE-6285 v2 patch does to app/design/frontend/rwd/default/template/checkout/cart.phtml
in 1.9.x.x prior to 1.9.2.0 which already includes the fix:
<?php if($this->getContinueShoppingUrl()): ?>
- <button type="button" title="<?php echo $this->__('Continue Shopping') ?>" class="button2 btn-continue" onclick="setLocation('<?php echo $this->getContinueShoppingUrl() ?>')"><span><span><?php echo $this->__('Continue Shopping') ?></span></span></button>
+ <button type="button" title="<?php echo $this->quoteEscape($this->__('Continue Shopping')) ?>" class="button2 btn-continue" onclick="setLocation('<?php echo Mage::helper('core')->quoteEscape($this->getContinueShoppingUrl()) ?>')"><span><span><?php echo $this->__('Continue Shopping') ?></span></span></button>
<?php endif; ?>
Diff of SUPEE-6285 V1 vs. V2 shows the only change was the RWD template:
160c160
< SUPEE-6285 | CE_1.9.1.1 | v1 | 7226d88b1eeb07a5fbc4e62be189a5219457cc14 | Mon Jun 22 16:32:26 2015 +0300 | 202596e441..7226d88b1e
---
> SUPEE-6285 | CE_1.9.1.1 | v2 | 7226d88b1eeb07a5fbc4e62be189a5219457cc14 | Mon Jun 22 16:32:26 2015 +0300 | 202596e441..7226d88b1e
1065a1065,1077
> diff --git app/design/frontend/rwd/default/template/checkout/cart.phtml app/design/frontend/rwd/default/template/checkout/cart.phtml
> index 7bceece..88753c3 100644
> --- app/design/frontend/rwd/default/template/checkout/cart.phtml
> +++ app/design/frontend/rwd/default/template/checkout/cart.phtml
> @@ -115,7 +115,7 @@
> <span class="or">-<?php echo $this->__('or'); ?>-</span>
>
> <?php if($this->getContinueShoppingUrl()): ?>
> - <button type="button" title="<?php echo $this->__('Continue Shopping') ?>" class="button2 btn-continue" onclick="setLocation('<?php echo $this->getContinueShoppingUrl() ?>')"><span><span><?php echo $this->__('Continue Shopping') ?></span></span></button>
> + <button type="button" title="<?php echo $this->quoteEscape($this->__('Continue Shopping')) ?>" class="button2 btn-continue" onclick="setLocation('<?php echo Mage::helper('core')->quoteEscape($this->getContinueShoppingUrl()) ?>')"><span><span><?php echo $this->__('Continue Shopping') ?></span></span></button>
> <?php endif; ?>
> <!--[if lt IE 8]>
> <input type="hidden" id="update_cart_action_container" />