[koha-commits] main Koha release repository branch 3.22.x updated. v3.22.09-116-gb99c3c2

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.22.x has been updated
       via  b99c3c2001993fe112e00e514bdaaaa0c94ce06e (commit)
      from  f9187241453d88573e1e25881b993566593ab366 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit b99c3c2001993fe112e00e514bdaaaa0c94ce06e
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Tue Aug 2 15:46:06 2016 +0100

    Bug 17029: Fix XSS in catalogue/*detail.pl
    
    Hit
      /cgi-bin/koha/catalogue/detail.pl?biblionumber=1<script type="text/javascript">alert("XSS")</script>
      /cgi-bin/koha/catalogue/ISBDdetail.pl?biblionumber=1<script type="text/javascript">alert("XSS")</script>
      /cgi-bin/koha/catalogue/MARCdetail.pl?biblionumber=1<script type="text/javascript">alert("XSS")</script>
      /cgi-bin/koha/catalogue/moredetail.pl?biblionumber=1<script type="text/javascript">alert("XSS")</script>
      /cgi-bin/koha/catalogue/labeledMARCdetail.pl?biblionumber=1<script type="text/javascript">alert("XSS")</script>
    
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>
    (cherry picked from commit f3a8e5a4117a0e95969ff2856dfcd95a6935ec55)
    Signed-off-by: Frédéric Demians <f.demians at tamil.fr>
    (cherry picked from commit 990aca1cb7548bcead783f40661acb156952d09a)
    Signed-off-by: Julian Maurice <julian.maurice at biblibre.com>

-----------------------------------------------------------------------

Summary of changes:
 catalogue/ISBDdetail.pl        |    2 ++
 catalogue/MARCdetail.pl        |    4 +++-
 catalogue/detail.pl            |    2 ++
 catalogue/labeledMARCdetail.pl |    2 ++
 catalogue/moredetail.pl        |    2 ++
 5 files changed, 11 insertions(+), 1 deletion(-)


hooks/post-receive
-- 
main Koha release repository