[koha-commits] main Koha release repository branch 3.14.x updated. v3.14.00-2-g2d4bbc3

Git repo owner gitmaster at git.koha-community.org
Tue Nov 26 19:01:19 CET 2013


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.14.x has been updated
       via  2d4bbc3e186a39a807caef9f21cd5323c3a58f7b (commit)
       via  682e706a4ac10b416b51bdb1ea8894dbe21b345e (commit)
      from  3fe0e784516309050fc5b6eda1ab7fdaf7643048 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 2d4bbc3e186a39a807caef9f21cd5323c3a58f7b
Author: Chris Cormack <chris at bigballofwax.co.nz>
Date:   Wed Nov 27 05:51:19 2013 +1300

    Bug 11307: (follow-up) apply fix to bootstrap theme (master and 3.14.x only)
    
    To test:
    Same as first patch, but using bootstrap theme
    
    Signed-off-by: Mark Tompsett <mtompset at hotmail.com>
    Signed-off-by: Martin Renvoize <martin.renvoize at ptfs-europe.com>
    Signed-off-by: Galen Charlton <gmc at esilibrary.com>

commit 682e706a4ac10b416b51bdb1ea8894dbe21b345e
Author: Chris Cormack <chris at bigballofwax.co.nz>
Date:   Wed Nov 27 05:37:07 2013 +1300

    Bug 11307: Fix potential XSS attack in public catalog RSS feed
    
    To test:
    1/ Craft a url like
    /cgi-bin/koha/opac-search.pl?q=a&count=50"'<h1>test</h1>&sort_by=acqdate_dsc&format=rss2
    2/ look at the source, notice
    <opensearch:itemsPerPage>50"'<h1>test</h1></opensearch:itemsPerPage>
    3/ apply the patch, and reload url
    4/ source now contains
     <opensearch:itemsPerPage>50"'<h1>test</h1></opensearch:itemsPerPage>
    
    Signed-off-by: Mark Tompsett <mtompset at hotmail.com>
    Signed-off-by: Martin Renvoize <martin.renvoize at ptfs-europe.com>
    Signed-off-by: Galen Charlton <gmc at esilibrary.com>

-----------------------------------------------------------------------

Summary of changes:
 koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-opensearch.tt |    2 +-
 koha-tmpl/opac-tmpl/prog/en/modules/opac-opensearch.tt      |    2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)


hooks/post-receive
-- 
main Koha release repository


More information about the koha-commits mailing list