[koha-commits] main Koha release repository branch master updated. v16.05.00-454-gb543fa7

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, master has been updated
       via  b543fa74fe888b9e53cfc06ac58e2f7ac1689ae5 (commit)
      from  96a9c2715ee2e4388e105e86e221bc280e1d757f (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit b543fa74fe888b9e53cfc06ac58e2f7ac1689ae5
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Wed Aug 3 13:57:43 2016 +0100

    Bug 17038: Fix XSS in catalogue/search.pl
    
    Test plan:
    Search for something like:
      \";alert(1)//135
    
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Note that this fix the parameters idx, q and op
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>

-----------------------------------------------------------------------

Summary of changes:
 koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tt |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)


hooks/post-receive
-- 
main Koha release repository