[koha-commits] main Koha release repository branch 3.22.x updated. v3.22.11-38-g3b407e3

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.22.x has been updated
       via  3b407e3ecdcfe9ac79ffdc3f160735240d8eb427 (commit)
      from  9931cedb03a3c4ae8121b52f7a11d80f6c0954a8 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 3b407e3ecdcfe9ac79ffdc3f160735240d8eb427
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Thu Sep 29 08:46:49 2016 +0100

    Bug 17365: Fix XSS in moremember.pl and memberentry.pl
    
    There are certainly hundred of places where they are not escaped...
    
    Test plan:
    Create a patron with "Arun <script>alert('code injection');</script>" in
    some of the fields.
    
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>
    
    Signed-off-by: Katrin Fischer  <katrin.fischer at bsz-bw.de>
    
    Signed-off-by: Brendan Gallagher <brendan at bywatersolutions.com>
    (cherry picked from commit 1d0d5f1398687ead3a17cd40f74f879e8ddf9a9d)
    Signed-off-by: Frédéric Demians <f.demians at tamil.fr>
    (cherry picked from commit a61c072f1acb77906843a5be319412f959374bda)
    Signed-off-by: Julian Maurice <julian.maurice at biblibre.com>

-----------------------------------------------------------------------

Summary of changes:
 .../intranet-tmpl/prog/en/includes/circ-menu.inc   |   14 ++---
 .../prog/en/includes/patron-title.inc              |   16 +++---
 .../prog/en/modules/members/memberentrygen.tt      |   46 ++++++++---------
 .../prog/en/modules/members/moremember.tt          |   54 ++++++++++----------
 4 files changed, 65 insertions(+), 65 deletions(-)


hooks/post-receive
-- 
main Koha release repository