[koha-commits] main Koha release repository branch master updated. v17.11.00-615-g3848f81

[Git repo owner]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, master has been updated
       via  3848f81c3c0eaafca162a1fdf3d3aa2de8fd3d43 (commit)
       via  51b6cf2aafbfb45b9fcb072403b986fe3c2add53 (commit)
       via  b59988f78d0db6ae953949aca9dd60bd88601596 (commit)
       via  e4301a52b83ca24876ff58fd78bee863df5ce398 (commit)
      from  f0e29fc46fbc9c6dad7bdd360a067696c930d4cc (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 3848f81c3c0eaafca162a1fdf3d3aa2de8fd3d43
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Tue Dec 26 18:05:56 2017 -0300

    Bug 19881: Remove authorities-list.pl
    
    For obvious reasons...
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    
    Signed-off-by: Nick Clemens <nick at bywatersolutions.com>
    
    Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>

commit 51b6cf2aafbfb45b9fcb072403b986fe3c2add53
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Wed Dec 20 12:13:10 2017 -0300

    Bug 19847: Track links within the records and 404 for others
    
    Test plan:
    Behave like a robot, you will get 404
    Be a human, you will be tracked
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    
    Signed-off-by: Nick Clemens <nick at bywatersolutions.com>
    
    Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>

commit b59988f78d0db6ae953949aca9dd60bd88601596
Author: Josef Moravec <josef.moravec at gmail.com>
Date:   Sun Dec 3 22:21:57 2017 +0000

    Bug 19738: Fix XSS on vendor name in serials module
    
    Test plan:
    
    1) do not apply this patch
    2) Have at least one vendor which name does contain javascript, for
    example: <i>Vendor 1</i><script>alert('Hi');</script>
    3) go to serial module and create new subscription
    4) use "Search for vendor"
    5) Search for your vendor, when search results table is presented, the
    javascript is executed
    6) go through subscription creation and save the new subscription
    7) On subscription detail page, the javascript is executed as well
    8) apply this patch
    9) Repeat 3-7, the script is not executed, the input is escaped
    
    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    
    Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
    
    Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>

commit e4301a52b83ca24876ff58fd78bee863df5ce398
Author: Nick Clemens <nick at bywatersolutions.com>
Date:   Thu Feb 15 17:05:29 2018 +0000

    Bug 20216: Correctly populate values in itemtype editor
    
    Caused by a bad merge conflict on bug 12768.
    
    To test:
    1 - Edit an item type, define a replacement cost,processing fee, and
    remote image url
    2 - Save the item type
    3 - Values are correct in list
    4 - Edit again
    5 - note values in fields are not populated
    6 - Save itemtype, values are lost
    7 - Apply patch
    8 - Repeat 1-4
    9 - Values should be correctly populated and saved now
    
    Signed-off-by: Owen Leonard <oleonard at myacpl.org>
    
    Bug 20216: (follow-up) - Fix other use of remote_image
    
    Signed-off-by: Jonathan Druart <jonathan.druart at bugs.koha-community.org>

-----------------------------------------------------------------------

Summary of changes:
 authorities/authorities-list.pl                    |   37 --------------------
 .../prog/en/modules/admin/itemtypes.tt             |   12 +++----
 .../prog/en/modules/serials/acqui-search-result.tt |    2 +-
 .../prog/en/modules/serials/subscription-detail.tt |    2 +-
 opac/tracklinks.pl                                 |   32 +++++++++--------
 5 files changed, 26 insertions(+), 59 deletions(-)
 delete mode 100755 authorities/authorities-list.pl


hooks/post-receive
-- 
main Koha release repository