[koha-commits] main Koha release repository branch 3.20.x updated. v3.20.13-15-g4c3c2c8

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.20.x has been updated
       via  4c3c2c8ec2dc748e8507ef4d6256b6187b0367c1 (commit)
       via  e552cd64bbb82a5e5dddc57568b6d2018ee59c95 (commit)
      from  852bc4525370f0dae43275bf3da65dea19fbde83 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 4c3c2c8ec2dc748e8507ef4d6256b6187b0367c1
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Wed Aug 3 08:49:10 2016 +0100

    Bug 17036: Fix XSS in circulation.pl
    
    Test plan:
    Enter the following in the "Check out" tab:
    "><script>alert('XSS')</script>
    
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>

commit e552cd64bbb82a5e5dddc57568b6d2018ee59c95
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Wed Aug 3 13:57:43 2016 +0100

    Bug 17038: Fix XSS in catalogue/search.pl
    
    Test plan:
    Search for something like:
      \";alert(1)//135
    
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Note that this fix the parameters idx, q and op
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>

-----------------------------------------------------------------------

Summary of changes:
 koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tt |    2 +-
 koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt  |    2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)


hooks/post-receive
-- 
main Koha release repository