[koha-commits] main Koha release repository branch 3.22.x updated. v3.22.09-95-ga503a52

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.22.x has been updated
       via  a503a522c2bfa34f8f64af8dbf2ecba8010b5201 (commit)
      from  a6d6b953e41641e9bfcfa74598a58bf9d5039743 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit a503a522c2bfa34f8f64af8dbf2ecba8010b5201
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Fri Jul 22 08:30:54 2016 +0100

    Bug 16878: Fix XSS in opac-memberentry
    
    The vars are gotten from the url and sent to the template as it. They
    must be escaped.
    
    Test plan:
    I have not managed to create the original issue, so there is no test
    plan for the XSS fix, but you can confirm there is no regression.
    
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    
    Signed-off-by: Brendan Gallagher <brendan at bywatersolutions.com>
    (cherry picked from commit 9bdea2e3691fd62e777cc974f89b867a69eec9a8)
    Signed-off-by: Frédéric Demians <f.demians at tamil.fr>
    (cherry picked from commit b505c6b7d636f262eadef82984b83b5194438724)
    Signed-off-by: Julian Maurice <julian.maurice at biblibre.com>

-----------------------------------------------------------------------

Summary of changes:
 opac/opac-memberentry.pl |    4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)


hooks/post-receive
-- 
main Koha release repository