[koha-commits] main Koha release repository branch 3.22.x updated. v3.22.09-81-g86df868

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.22.x has been updated
       via  86df8681c5a36feb5aed99178a5d4d5ed308e277 (commit)
      from  963cd07b93d831d5da81061479c9c5af3c9ae054 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 86df8681c5a36feb5aed99178a5d4d5ed308e277
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Fri Jul 22 08:14:27 2016 +0100

    Bug 16958: Fix XSS in opac-imageviewer.pl
    
    Test plan:
    Trigger
    /opac-imageviewer.pl?biblionumber=14&imagenumber=7"><sCrIpT>alert(42)<%2fsCrIpT>
    
    => Without this patch you will see the JS alert
    => With this patch applied you won't see it
    
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>
    Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>
    (cherry picked from commit 65918b146cd88f38a9d894be8175d049ea70d05f)
    Signed-off-by: Frédéric Demians <f.demians at tamil.fr>
    (cherry picked from commit a3e2ea765f2e34f397fa9e1236dbc4e837311f88)
    Signed-off-by: Julian Maurice <julian.maurice at biblibre.com>

-----------------------------------------------------------------------

Summary of changes:
 koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-imageviewer.tt |    6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)


hooks/post-receive
-- 
main Koha release repository