[koha-commits] main Koha release repository branch master updated. v16.05.00-1043-g1d0d5f1

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, master has been updated
       via  1d0d5f1398687ead3a17cd40f74f879e8ddf9a9d (commit)
      from  a1dcd2f2e67f2dc998d2eae0fc6097eb9edbb874 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 1d0d5f1398687ead3a17cd40f74f879e8ddf9a9d
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Thu Sep 29 08:46:49 2016 +0100

    Bug 17365: Fix XSS in moremember.pl and memberentry.pl
    
    There are certainly hundred of places where they are not escaped...
    
    Test plan:
    Create a patron with "Arun <script>alert('code injection');</script>" in
    some of the fields.
    
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>
    
    Signed-off-by: Katrin Fischer  <katrin.fischer at bsz-bw.de>
    
    Signed-off-by: Brendan Gallagher <brendan at bywatersolutions.com>

-----------------------------------------------------------------------

Summary of changes:
 .../intranet-tmpl/prog/en/includes/circ-menu.inc   |   14 +++---
 .../prog/en/includes/members-toolbar.inc           |    2 +-
 .../prog/en/includes/patron-title.inc              |   16 +++---
 .../prog/en/modules/members/memberentrygen.tt      |   46 ++++++++---------
 .../prog/en/modules/members/moremember.tt          |   52 ++++++++++----------
 5 files changed, 65 insertions(+), 65 deletions(-)


hooks/post-receive
-- 
main Koha release repository