[koha-commits] main Koha release repository branch 3.8.x updated. v3.08.05-38-gcfb32a0

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.8.x has been updated
       via  cfb32a04c969e09c948f2942fa56b6bf980701d6 (commit)
       via  913f80c93825388ef1f3827cdf627558e85a4469 (commit)
       via  bf3671092a8c65c3920c85a0ff65d90cadeb0fe5 (commit)
      from  bebe004d792302b31940b13b2057c07d00ffc096 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit cfb32a04c969e09c948f2942fa56b6bf980701d6
Author: Chris Cormack <chrisc at catalyst.net.nz>
Date:   Tue Oct 9 14:19:18 2012 +1300

    Bug 3652 XSS vulnerability in facets
    
    Signed-off-by: Katrin Fischer <Katrin.Fischer.83 at web.de>
    Confirmed bug with test plan on the bug and checked that
    problem is fixed after applying the patch and that facets
    still work.
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit 913f80c93825388ef1f3827cdf627558e85a4469
Author: Chris Cormack <chrisc at catalyst.net.nz>
Date:   Tue Oct 9 14:11:10 2012 +1300

    Bug 3652: XSS vulnerability in page numbering
    
    Signed-off-by: Katrin Fischer <Katrin.Fischer.83 at web.de>
    Confirmed the problem with test plan on the bug and checked that
    paging works correctly after the patch.
    
    Signed-off-by: Paul Poulain <paul.poulain at biblibre.com>
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit bf3671092a8c65c3920c85a0ff65d90cadeb0fe5
Author: Chris Cormack <chrisc at catalyst.net.nz>
Date:   Mon Oct 8 21:30:49 2012 +1300

    Bug 3652 : [SIGNED-OFF] [SECURITY] XSS vulnerability
    
    Signed-off-by: Magnus Enger <magnus at enger.priv.no>
    Works as advertised. After applying the patch, <blink>fish</blink>
    is displayed on the page, but no blinking occurs.
    
    Signed-off-by: Magnus Enger <magnus at enger.priv.no>
    Signed-off-by: Paul Poulain <paul.poulain at biblibre.com>
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

-----------------------------------------------------------------------

Summary of changes:
 .../opac-tmpl/prog/en/includes/opac-facets.inc     |    6 +++---
 .../opac-tmpl/prog/en/includes/page-numbers.inc    |    7 +++----
 .../opac-tmpl/prog/en/modules/opac-shelves.tt      |    2 +-
 3 files changed, 7 insertions(+), 8 deletions(-)


hooks/post-receive
-- 
main Koha release repository