[koha-commits] main Koha release repository branch 3.20.x updated. v3.20.13-12-gb5c351f

Git repo owner gitmaster at git.koha-community.org
Mon Aug 8 22:09:27 CEST 2016


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.20.x has been updated
       via  b5c351fd7fe3aba91d868aa49a3eb0abb1648324 (commit)
       via  c6433c52bf9b853b7674fb585a13eecb22fc4b3a (commit)
      from  2399cef9b6554ccdc3ba09c8b39b84dceaca2036 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit b5c351fd7fe3aba91d868aa49a3eb0abb1648324
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Tue Aug 2 14:15:09 2016 +0100

    Bug 17022: Fix XSS in acqui/z3950_search.pl
    
    Test plan:
    Enter the following in the different inputs:
    <script>alert('XSS')</script>
    
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit c6433c52bf9b853b7674fb585a13eecb22fc4b3a
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Tue Aug 2 14:06:41 2016 +0100

    Bug 17023: Fix XSS in cataloguing/z3950_search.pl
    
    Test plan:
    Enter the following in the different inputs:
    <script>alert('XSS')</script>
    
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

-----------------------------------------------------------------------

Summary of changes:
 .../prog/en/modules/acqui/z3950_search.tt          |   56 ++++++++++----------
 .../prog/en/modules/cataloguing/z3950_search.tt    |   56 ++++++++++----------
 2 files changed, 56 insertions(+), 56 deletions(-)


hooks/post-receive
-- 
main Koha release repository


More information about the koha-commits mailing list