[koha-commits] main Koha release repository branch 3.20.x updated. v3.20.14-3-ge763349

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.20.x has been updated
       via  e763349bfc2579f70fd4ecc989aeeeb51c56623c (commit)
       via  8c18b0053fa74525ffc0306b6a459ed9c4e72e56 (commit)
      from  6a1488b23a827f9ada68a4f94142b43697579ded (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit e763349bfc2579f70fd4ecc989aeeeb51c56623c
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Tue Aug 2 14:46:11 2016 +0100

    Bug 17025: Fix XSS in serials-search.pl
    
    Test plan:
    Hit
      /serials/serials-search.pl?ISSN_filter="%2F><script>alert('XSS')<%2Fscript>&searched=1
      /serials/serials-search.pl?title_filter="%2F><script>alert('XSS')<%2Fscript>&searched=1
    
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>
    (cherry picked from commit 1ea1504c30c5c34dd763027caee55dcf359e94cf)
    Signed-off-by: Frédéric Demians <f.demians at tamil.fr>
    (cherry picked from commit d432c5bba836601b809a9f807af05ef85e952453)
    Signed-off-by: Julian Maurice <julian.maurice at biblibre.com>
    (cherry picked from commit 422eeb01fe83e3e9166406cfb244e3053ad72bd6)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

commit 8c18b0053fa74525ffc0306b6a459ed9c4e72e56
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Thu Jul 28 13:01:43 2016 +0100

    Bug 17021: Fix XSS in circ/returns.pl
    
    Test plan:
    Enter the following in the barcode input:
    <script>alert('XSS')</script>
    
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>
    (cherry picked from commit 12b4c83f5a5c11af635cae83e6837ff80dc02da7)
    Signed-off-by: Frédéric Demians <f.demians at tamil.fr>
    (cherry picked from commit 4f5121a99e063fc05fb19caac89e5a56b1ff0afb)
    Signed-off-by: Julian Maurice <julian.maurice at biblibre.com>
    (cherry picked from commit f4a9e942424524da9251f4d55dd01fd08e05846f)
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>

-----------------------------------------------------------------------

Summary of changes:
 .../intranet-tmpl/prog/en/includes/serials-search.inc    |    6 +++---
 .../prog/en/includes/subscriptions-search.inc            |   14 +++++++-------
 koha-tmpl/intranet-tmpl/prog/en/modules/circ/returns.tt  |    6 +++---
 3 files changed, 13 insertions(+), 13 deletions(-)


hooks/post-receive
-- 
main Koha release repository