[koha-commits] main Koha release repository branch master updated. v16.05.00-3-gbb4543f

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, master has been updated
       via  bb4543f7db62836b048c632a0a184acb021286ad (commit)
       via  a44a930c076fceca0f7193f488e187d9849f89b6 (commit)
      from  b99731e2e0290adddb5e419b8a987a9356fdf631 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit bb4543f7db62836b048c632a0a184acb021286ad
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Thu May 26 12:08:30 2016 +0100

    Bug 16599: Fix other potentials XSS for shelfname
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>
    Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
    
    Signed-off-by: Brendan Gallagher <brendan at bywatersolutions.com>

commit a44a930c076fceca0f7193f488e187d9849f89b6
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Thu May 26 12:03:55 2016 +0100

    Bug 16599: Fix XSS in opac-shareshelf.pl
    
    Test plan:
    - Create a list with the name "<script>alert(1)</script>"
    - On the shelf list, click on share
    => Without this patch you will see the JS alert
    => With this patch applied you won't see it
    
    Reported by Kaybee at Dionach
    
    Signed-off-by: Chris Cormack <chrisc at catalyst.net.nz>
    Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
    
    Signed-off-by: Brendan Gallagher <brendan at bywatersolutions.com>

-----------------------------------------------------------------------

Summary of changes:
 koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-downloadshelf.tt   |    6 +++---
 koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-results-grouped.tt |    2 +-
 koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shareshelf.tt      |    4 ++--
 koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-shelves-rss.tt     |    2 +-
 4 files changed, 7 insertions(+), 7 deletions(-)


hooks/post-receive
-- 
main Koha release repository