[koha-commits] main Koha release repository branch master updated. v16.05.00-451-g1ea1504

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, master has been updated
       via  1ea1504c30c5c34dd763027caee55dcf359e94cf (commit)
      from  f3a8e5a4117a0e95969ff2856dfcd95a6935ec55 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 1ea1504c30c5c34dd763027caee55dcf359e94cf
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Tue Aug 2 14:46:11 2016 +0100

    Bug 17025: Fix XSS in serials-search.pl
    
    Test plan:
    Hit
      /serials/serials-search.pl?ISSN_filter="%2F><script>alert('XSS')<%2Fscript>&searched=1
      /serials/serials-search.pl?title_filter="%2F><script>alert('XSS')<%2Fscript>&searched=1
    
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>

-----------------------------------------------------------------------

Summary of changes:
 .../intranet-tmpl/prog/en/includes/serials-search.inc    |    6 +++---
 .../prog/en/includes/subscriptions-search.inc            |   14 +++++++-------
 2 files changed, 10 insertions(+), 10 deletions(-)


hooks/post-receive
-- 
main Koha release repository