[koha-commits] main Koha release repository branch master updated. v16.05.00-914-g9734726

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, master has been updated
       via  9734726846f6fa652d88c8bc39c7b43595422465 (commit)
       via  79cd9e9fd460b7376ee06fe51eed1e3ed9392d81 (commit)
       via  3169434cfa7295025e4ff5fea58f7e9730a96650 (commit)
       via  515208d5ec308ade967efe04388bbedbf5f2b057 (commit)
      from  69cbea8e0c2bbb59b052bc355e805be16969f789 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 9734726846f6fa652d88c8bc39c7b43595422465
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Wed Sep 14 09:20:01 2016 +0100

    Bug 16800: Fix XSS in additem.pl
    
    Signed-off-by: Katrin Fischer  <katrin.fischer at bsz-bw.de>
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>

commit 79cd9e9fd460b7376ee06fe51eed1e3ed9392d81
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Tue Aug 2 16:05:09 2016 +0100

    Bug 16800: Fix XSS in catalogue/*detail.tt - isbn
    
    Test plan:
    catalogue a bibliographic record with a isbn=
      </title><script>alert('XSS')</script>
    
    Go on the detail pages.
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>
    
    Signed-off-by: Katrin Fischer  <katrin.fischer at bsz-bw.de>
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>

commit 3169434cfa7295025e4ff5fea58f7e9730a96650
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Tue Aug 2 16:03:37 2016 +0100

    Bug 16800: Fix XSS in catalogue/*detail.tt - author
    
    Test plan:
    catalogue a bibliographic record with a author=
      </title><script>alert('XSS')</script>
    
    Go on the detail pages.
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>
    
    Signed-off-by: Katrin Fischer  <katrin.fischer at bsz-bw.de>
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>

commit 515208d5ec308ade967efe04388bbedbf5f2b057
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Tue Aug 2 16:02:07 2016 +0100

    Bug 16800: Fix XSS in catalogue/*detail.tt - title
    
    Test plan:
    catalogue a bibliographic record with a title=
      </title><script>alert('XSS')</script>
    
    Go on the detail pages.
    => Without this patch you will see the alert
    => With this patch, no more alert
    
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>
    
    This of course means that any html in the title will no longer be
    evaluated. :
    
    Signed-off-by: Katrin Fischer  <katrin.fischer at bsz-bw.de>
    
    Signed-off-by: Kyle M Hall <kyle at bywatersolutions.com>

-----------------------------------------------------------------------

Summary of changes:
 .../intranet-tmpl/prog/en/modules/catalogue/ISBDdetail.tt  |    2 +-
 .../intranet-tmpl/prog/en/modules/catalogue/MARCdetail.tt  |    2 +-
 .../intranet-tmpl/prog/en/modules/catalogue/detail.tt      |   12 ++++++------
 .../prog/en/modules/catalogue/labeledMARCdetail.tt         |    6 +++---
 .../intranet-tmpl/prog/en/modules/catalogue/moredetail.tt  |    6 +++---
 .../intranet-tmpl/prog/en/modules/cataloguing/additem.tt   |    6 +++---
 6 files changed, 17 insertions(+), 17 deletions(-)


hooks/post-receive
-- 
main Koha release repository