[koha-commits] main Koha release repository branch master updated. v16.05.00-411-gf563ba7

Git repo owner gitmaster at git.koha-community.org
Thu Aug 4 20:14:15 CEST 2016


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, master has been updated
       via  f563ba795e4863328ff4930e7877caae9458206c (commit)
      from  9d00353a92487dcde654d88206fd5458448fff1b (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit f563ba795e4863328ff4930e7877caae9458206c
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Tue Aug 2 14:32:46 2016 +0100

    Bug 17024: Fix XSS in tools/viewlog.pl
    
    Test plan:
        Hit /tools/viewlog.pl?do_it=1&modules=CATALOGUING&action=MODIFY&object=<script>alert("XSS")</script>
    
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    
    Signed-off-by: Brendan Gallagher <brendan at bywatersolutions.com>

-----------------------------------------------------------------------

Summary of changes:
 .../prog/en/includes/biblio-view-menu.inc          |   20 ++++++++++----------
 .../intranet-tmpl/prog/en/modules/tools/viewlog.tt |   16 ++++++++--------
 2 files changed, 18 insertions(+), 18 deletions(-)


hooks/post-receive
-- 
main Koha release repository


More information about the koha-commits mailing list