[koha-commits] main Koha release repository branch master updated. v16.05.00-1057-g35de8aa

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, master has been updated
       via  35de8aa1ef07b04cfc7c977f7168cd36b40d7941 (commit)
      from  fbe75e66ccb93a6a4d973e3066ca1ebad169a5b6 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 35de8aa1ef07b04cfc7c977f7168cd36b40d7941
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Tue Oct 4 08:29:30 2016 +0100

    Bug 17393: Fix non-Latin chars handling in self reg
    
    If you fill the patron self reg with non-latin characters, they will be
    encoded with HTML entities (é)
    This bug leads to generate a userid with weird behaviors:
    é => eacute
    ł => x
    
    Test plan:
    0/ Do not apply the patch
    1/ Set up the Self reg feature
    2/ fill surname, fistname with something like "Michał pouéàç"
    3/ Save
    4/ See the bad encoding/replacement on the screen and look at the data
    The accentued chars are replaced with their html representation and the
    non-Latin chars with a 'x'
    in the DB
    5/ Apply this patch
    6/ Repeat steps 2, 3
    7/ Everything should be ok
    8/ Try to make sure this HTML::Entities escape was not useful:
    fill surname with "surname <script>alert("xss?")</script>"
    Save and look at the data
    
    Followed test plan, works as expected.
    Signed-off-by: Marc Véron <veron at veron.ch>
    
    Signed-off-by: Katrin Fischer  <katrin.fischer at bsz-bw.de>
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>

-----------------------------------------------------------------------

Summary of changes:
 opac/opac-memberentry.pl |    3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)


hooks/post-receive
-- 
main Koha release repository