[koha-commits] main Koha release repository branch master updated. v3.14.00-42-g803789f

Git repo owner gitmaster at git.koha-community.org
Tue Nov 26 19:01:20 CET 2013


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, master has been updated
       via  803789f13b09fc3429f41f6a647e8fdaa2d20772 (commit)
       via  6f0d4153dfb8f85ab2b41c1e2780d4171c00e4ee (commit)
      from  17b78abc7fe6a66ab48a01ac4a7be8e88ad165fc (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 803789f13b09fc3429f41f6a647e8fdaa2d20772
Author: Chris Cormack <chris at bigballofwax.co.nz>
Date:   Wed Nov 27 05:51:19 2013 +1300

    Bug 11307: (follow-up) apply fix to bootstrap theme (master and 3.14.x only)
    
    To test:
    Same as first patch, but using bootstrap theme
    
    Signed-off-by: Mark Tompsett <mtompset at hotmail.com>
    Signed-off-by: Martin Renvoize <martin.renvoize at ptfs-europe.com>
    Signed-off-by: Galen Charlton <gmc at esilibrary.com>

commit 6f0d4153dfb8f85ab2b41c1e2780d4171c00e4ee
Author: Chris Cormack <chris at bigballofwax.co.nz>
Date:   Wed Nov 27 05:37:07 2013 +1300

    Bug 11307: Fix potential XSS attack in public catalog RSS feed
    
    To test:
    1/ Craft a url like
    /cgi-bin/koha/opac-search.pl?q=a&count=50"'<h1>test</h1>&sort_by=acqdate_dsc&format=rss2
    2/ look at the source, notice
    <opensearch:itemsPerPage>50"'<h1>test</h1></opensearch:itemsPerPage>
    3/ apply the patch, and reload url
    4/ source now contains
     <opensearch:itemsPerPage>50"'<h1>test</h1></opensearch:itemsPerPage>
    
    Signed-off-by: Mark Tompsett <mtompset at hotmail.com>
    Signed-off-by: Martin Renvoize <martin.renvoize at ptfs-europe.com>
    Signed-off-by: Galen Charlton <gmc at esilibrary.com>

-----------------------------------------------------------------------

Summary of changes:
 koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-opensearch.tt |    2 +-
 koha-tmpl/opac-tmpl/prog/en/modules/opac-opensearch.tt      |    2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)


hooks/post-receive
-- 
main Koha release repository


More information about the koha-commits mailing list