This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".
The branch, master has been updated
via 1d0d5f1398687ead3a17cd40f74f879e8ddf9a9d (commit)
from a1dcd2f2e67f2dc998d2eae0fc6097eb9edbb874 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit 1d0d5f1398687ead3a17cd40f74f879e8ddf9a9d
Author: Jonathan Druart <jonathan.dru...@bugs.koha-community.org>
Date: Thu Sep 29 08:46:49 2016 +0100
Bug 17365: Fix XSS in moremember.pl and memberentry.pl
There are certainly hundred of places where they are not escaped...
Test plan:
Create a patron with "Arun <script>alert('code injection');</script>" in
some of the fields.
Signed-off-by: Chris Cormack <ch...@bigballofwax.co.nz>
Signed-off-by: Katrin Fischer <katrin.fisc...@bsz-bw.de>
Signed-off-by: Brendan Gallagher <bren...@bywatersolutions.com>
-----------------------------------------------------------------------
Summary of changes:
.../intranet-tmpl/prog/en/includes/circ-menu.inc | 14 +++---
.../prog/en/includes/members-toolbar.inc | 2 +-
.../prog/en/includes/patron-title.inc | 16 +++---
.../prog/en/modules/members/memberentrygen.tt | 46 ++++++++---------
.../prog/en/modules/members/moremember.tt | 52 ++++++++++----------
5 files changed, 65 insertions(+), 65 deletions(-)
hooks/post-receive
--
main Koha release repository
_______________________________________________
koha-commits mailing list
koha-commits@lists.koha-community.org
http://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-commits
