[koha-commits] main Koha release repository branch 3.20.x updated. v3.20.13-7-g4fbb259

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.20.x has been updated
       via  4fbb259a0f6e769657dd895e20f4ce25772e15a7 (commit)
      from  e4bb28460df79282e8d9703bb979f9e70f829c0c (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 4fbb259a0f6e769657dd895e20f4ce25772e15a7
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Tue Aug 2 15:41:49 2016 +0100

    Bug 17028: Fix XSS in reserve/request.pl
    
    Test plan:
    Hit
      /cgi-bin/koha/reserve/request.pl?biblionumber=1"><script type="text/javascript">alert("XSS")</script>
    
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    
    Signed-off-by: Brendan Gallagher <brendan at bywatersolutions.com>
    (cherry picked from commit 66f81fc2101f194d39592bc28f3e2ff69764bc00)
    Signed-off-by: Frédéric Demians <f.demians at tamil.fr>
    (cherry picked from commit 542c0dbbaa8bff5a101058e0e2397e21edf8f192)
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>

-----------------------------------------------------------------------

Summary of changes:
 reserve/request.pl |    1 +
 1 file changed, 1 insertion(+)


hooks/post-receive
-- 
main Koha release repository