gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
24,342 Commits 39 Branches 720 Tags 6 GiB
Perl 44.2%
JavaScript 41.1%
HTML 6%
XSLT 3.1%
Vue 1.9%
Other 3.2%
Go to file
Jonathan Druart 76844ae98a Bug 16599: Fix XSS in opac-shareshelf.pl 
Test plan:
- Create a list with the name "<script>alert(1)</script>"
- On the shelf list, click on share
=> Without this patch you will see the JS alert
=> With this patch applied you won't see it

Reported by Kaybee at Dionach

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>

Signed-off-by: Brendan Gallagher <brendan@bywatersolutions.com>
(cherry picked from commit a44a930c07)
Signed-off-by: Julian Maurice <julian.maurice@biblibre.com>
(cherry picked from commit 858e3b2043)
Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>
 		2016-06-22 08:43:49 +12:00
C4 Bug 16709: Followup of bug 11038 for 3.20.x only 2016-06-21 08:28:30 +12:00
Koha Bug 15743: Allow plugins to embed Perl modules 2016-03-01 15:41:14 +01:00
OpenILS Bug 9239 QA follow-up: remove stray debug code 2013-03-16 21:32:34 -04:00
acqui Bug 9184: Acq - Don't show authority batches when ordering from staged file 2015-12-11 18:02:35 +01:00
admin Bug 15962: Block the currency deletion if used 2016-04-27 16:52:44 +02:00
authorities Bug 15572: Follow-up to fix error on authority creation 2016-01-25 16:42:19 +01:00
basket Bug 14330: Remove unused email_sender from sendbasket/sendshelf 2015-06-09 08:38:40 +12:00
catalogue Bug 14244: viewing a bib item's circ history requires circulation permissions 2016-03-15 08:54:28 +01:00
cataloguing Bug 15572: Follow-up to fix error on authority creation 2016-01-25 16:42:19 +01:00
circ Bug 15997 - Hold Ratios for ordered items doesn't count orders where AcqCreateItem is set to 'receiving' 2016-03-23 13:49:01 +01:00
course_reserves Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
debian Bug 15113: koha-rebuild-zebra should check USE_INDEXER_DAEMON and skip if enabled 2016-04-27 16:57:53 +02:00
docs Bug 9978: (followup) Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:43 -03:00
errors Bug 11944: use CGI( -utf8 ) everywhere 2015-01-13 13:07:21 -03:00
etc Bug 12549: Hard coded font Paths ( DejaVu ) cause problems for non-Debian systems 2016-03-01 14:47:23 +01:00
install_misc Bug 14066: Removing more Readonly 2015-05-06 11:05:22 -03:00
installer Bug 12752: FIX letter names in 3.15.00.041 2016-06-20 08:46:47 +12:00
koha-tmpl Bug 16599: Fix XSS in opac-shareshelf.pl 2016-06-22 08:43:49 +12:00
labels Bug 12911: batch_id for new labels batches can be asssigned to several batches 2015-05-14 11:11:03 -03:00
members Bug 15930: Make patron searches defaulting on 'contain' 2016-04-27 17:21:18 +02:00
misc Bug 15967: Fix regression from bug 14133 - notify the library if patron is not 2016-04-27 16:09:35 +02:00
offline_circ Bug 15344: Remove some other calls of GetMemberDetails from pl scripts 2015-12-31 18:13:01 +01:00
opac Bug 16179: Do not crash if "rate me" is clicked and not rate selected 2016-04-27 17:02:34 +02:00
patron_lists Bug 11944: use CGI( -utf8 ) everywhere 2015-01-13 13:07:21 -03:00
patroncards Bug 15109: Make name the default sort order for all patron searches 2015-11-29 22:09:58 +01:00
plugins Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
reports Bug 1750 - Report bor_issues_top erroneous and truncated results. 2016-04-27 17:10:55 +02:00
reserve Bug 15638: Spelling mistake in request.pl 2016-02-20 08:39:19 +01:00
reviews Bug 9978: (followup) Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:43 -03:00
rotating_collections Bug 15066: Make transfer rotating collection works under Plack 2015-11-29 21:20:44 +01:00
selenium
…
serials Bug 14641: [SIGNED-OFF] Warns in subscription-add.pl 2016-02-11 20:05:54 +01:00
services Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
skel Bug 11078: Add locking to rebuild_zebra 2014-02-28 22:21:41 +00:00
sms Bug 11944: use CGI( -utf8 ) everywhere 2015-01-13 13:07:21 -03:00
suggestion Bug 15624: Spelling mistake in suggestion.pl 2016-02-11 20:09:16 +01:00
svc Bug 15998 - svc/holds: use holdingbranch instead of holding_branch 2016-03-09 12:13:00 +01:00
t Bug 16407: Simplify comments 2016-06-21 08:50:56 +12:00
tags Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
test Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
tmp/modified_authorities
…
tools Bug 16426: follow-up of bug 15840 - correctly manage userid while inserting patrons 2016-06-20 08:55:37 +12:00
virtualshelves Bug 15137: Display ISBN and author info when sending list by email 2015-11-29 21:59:24 +01:00
xt Bug 13941: [1/2] Test <body> tag with id/class attributes 2015-04-24 09:47:28 -03:00
.editorconfig Bug 12545: Add EditorConfig.org file to the source tree 2014-08-22 11:07:45 -03:00
.htaccess
…
.mailmap (RM followup) .mailmap updates 2015-05-27 16:03:00 +12:00
INSTALL
…
INSTALL.debian
…
INSTALL.fedora7 Bug 11757: remove dependency on POE 2014-02-15 01:38:15 +00:00
INSTALL.opensuse Bug 11757: remove dependency on POE 2014-02-15 01:38:15 +00:00
INSTALL.ubuntu Bug 7764: (follow-up) editorial tweaks 2013-10-04 16:27:55 +00:00
Koha.pm Version 3.20.10 2016-03-23 16:11:29 +01:00
LICENSE Bug 9440 - update Koha's LICENSE file from GPL2 to GPL3 2013-02-12 08:52:10 -05:00
MANIFEST.SKIP Bug 9546 : Updating make manifest tardist 2013-02-06 23:54:46 -05:00
Makefile.PL Bug 12549: (QA followup) missing newline in CLI dialog 2016-03-01 14:48:00 +01:00
README Bug 9440 - update Koha's LICENSE file from GPL2 to GPL3 2013-02-12 08:52:10 -05:00
README.robots
…
about.pl Bug 12721 - Syspref StatisticsFields: Warning on About page and text change in System preferences 2016-06-20 09:22:24 +12:00
changelanguage.pl Bug 9978: (followup) Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:43 -03:00
edithelp.pl Bug 14813: Fix encoding issues on editing help pages 2015-09-23 05:36:42 +12:00
fix-perl-path.PL Bug 9978: (followup) Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:43 -03:00
help.pl Bug 14812: Display the help in the correct language 2015-10-24 00:43:58 +13:00
install-CPAN.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
koha_perl_deps.pl bug 10548: fix count of missing required dependencies by koha_perl_deps.pl 2013-07-11 14:03:32 +00:00
kohaversion.pl Bug 13758: Move the Koha version from kohaversion.pl 2015-05-07 11:39:04 -03:00
mainpage.pl Bug 8007: Discharge - Glue 2015-04-30 12:33:53 -03:00
rewrite-config.PL Bug 12549: Hard coded font Paths ( DejaVu ) cause problems for non-Debian systems 2016-03-01 14:47:23 +01:00

README 

Koha is a free software integrated library system.

Koha is distributed under the GNU GPL version 3 or later.
Please read the file LICENSE for more details.

To install or upgrade Koha, please see the INSTALL file appropriate
to your platform.

Report bugs at http://bugs.koha-community.org/

Visit the Koha Project website at http://www.koha-community.org/