[koha-commits] main Koha release repository branch 3.22.x updated. v3.22.11-47-gde1c569

Git repo owner gitmaster at git.koha-community.org
Mon Oct 24 12:40:36 CEST 2016


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, 3.22.x has been updated
       via  de1c5696e0f8828990c95dbdc0520abb12bf476c (commit)
      from  6efb6830a24555809be7b1cff1faf156f7cb67a2 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit de1c5696e0f8828990c95dbdc0520abb12bf476c
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Tue Oct 4 08:29:30 2016 +0100

    Bug 17393: Fix non-Latin chars handling in self reg
    
    If you fill the patron self reg with non-latin characters, they will be
    encoded with HTML entities (é)
    This bug leads to generate a userid with weird behaviors:
    é => eacute
    ł => x
    
    Test plan:
    0/ Do not apply the patch
    1/ Set up the Self reg feature
    2/ fill surname, fistname with something like "Michał pouéàç"
    3/ Save
    4/ See the bad encoding/replacement on the screen and look at the data
    The accentued chars are replaced with their html representation and the
    non-Latin chars with a 'x'
    in the DB
    5/ Apply this patch
    6/ Repeat steps 2, 3
    7/ Everything should be ok
    8/ Try to make sure this HTML::Entities escape was not useful:
    fill surname with "surname <script>alert("xss?")</script>"
    Save and look at the data
    
    Followed test plan, works as expected.
    Signed-off-by: Marc Véron <veron at veron.ch>
    
    Signed-off-by: Katrin Fischer  <katrin.fischer at bsz-bw.de>
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>
    (cherry picked from commit 35de8aa1ef07b04cfc7c977f7168cd36b40d7941)
    Signed-off-by: Frédéric Demians <f.demians at tamil.fr>
    (cherry picked from commit e25934f6cdb1eaae0fbc9be15afe55a3ee2ad51a)
    Signed-off-by: Julian Maurice <julian.maurice at biblibre.com>

-----------------------------------------------------------------------

Summary of changes:
 opac/opac-memberentry.pl |    3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)


hooks/post-receive
-- 
main Koha release repository


More information about the koha-commits mailing list