[koha-commits] main Koha release repository branch master updated. v16.05.00-410-g9d00353
Git repo owner
gitmaster at git.koha-community.org
Thu Aug 4 20:11:04 CEST 2016
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".
The branch, master has been updated
via 9d00353a92487dcde654d88206fd5458448fff1b (commit)
from 66f81fc2101f194d39592bc28f3e2ff69764bc00 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 9d00353a92487dcde654d88206fd5458448fff1b
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date: Tue Aug 2 14:51:49 2016 +0100
Bug 17026: Fix XSS in serials/checkexpiration.pl
Test plan:
Hit:
/serials/checkexpiration.pl?title="><script>alert("XSS")</script>&date=12/02/2002
/serials/checkexpiration.pl?issn="><script>alert("XSS")</script>&date=12/02/2002
=> Without this patch you will see the alert
=> With this patch, no more alert
Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>
Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
Signed-off-by: Brendan Gallagher <brendan at bywatersolutions.com>
-----------------------------------------------------------------------
Summary of changes:
.../intranet-tmpl/prog/en/modules/serials/checkexpiration.tt | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
hooks/post-receive
--
main Koha release repository
More information about the koha-commits
mailing list