[koha-commits] main Koha release repository branch 3.22.x updated. v3.22.09-120-g2653765

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.22.x has been updated
       via  26537653657e02e7bc201b55ac49c5186607cd03 (commit)
      from  2ad850b0b56219d67d25065ece3b4cb2b61361ba (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 26537653657e02e7bc201b55ac49c5186607cd03
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Wed Aug 3 13:57:43 2016 +0100

    Bug 17038: Fix XSS in catalogue/search.pl
    
    Test plan:
    Search for something like:
      \";alert(1)//135
    
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Note that this fix the parameters idx, q and op
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>
    (cherry picked from commit b543fa74fe888b9e53cfc06ac58e2f7ac1689ae5)
    Signed-off-by: Frédéric Demians <f.demians at tamil.fr>
    (cherry picked from commit 97f1d825cd4031e0c9077d9d8cf0f0c7f69d894c)
    Signed-off-by: Julian Maurice <julian.maurice at biblibre.com>

-----------------------------------------------------------------------

Summary of changes:
 koha-tmpl/intranet-tmpl/prog/en/modules/catalogue/results.tt |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)


hooks/post-receive
-- 
main Koha release repository