[koha-commits] main Koha release repository branch 3.22.x updated. v3.22.09-119-g2ad850b

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.22.x has been updated
       via  2ad850b0b56219d67d25065ece3b4cb2b61361ba (commit)
      from  f4a9e942424524da9251f4d55dd01fd08e05846f (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 2ad850b0b56219d67d25065ece3b4cb2b61361ba
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Wed Aug 3 08:49:10 2016 +0100

    Bug 17036: Fix XSS in circulation.pl
    
    Test plan:
    Enter the following in the "Check out" tab:
    "><script>alert('XSS')</script>
    
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>
    (cherry picked from commit 96a9c2715ee2e4388e105e86e221bc280e1d757f)
    Signed-off-by: Frédéric Demians <f.demians at tamil.fr>
    (cherry picked from commit 3bf66eb1a1af1f917ffbf3865762cac64bfdbaef)
    Signed-off-by: Julian Maurice <julian.maurice at biblibre.com>

-----------------------------------------------------------------------

Summary of changes:
 koha-tmpl/intranet-tmpl/prog/en/modules/circ/circulation.tt |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)


hooks/post-receive
-- 
main Koha release repository