gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
26,845 Commits 39 Branches 720 Tags 6 GiB
Perl 44.2%
JavaScript 41.1%
HTML 6%
XSLT 3.1%
Vue 1.9%
Other 3.2%
Go to file
Jonathan Druart 7cb27f092a Bug 17023: Fix XSS in acqui/z3950_search.pl 
Test plan:
Enter the following in the different inputs:
<script>alert('XSS')</script>

=> Without this patch you will see the alert
=> With this patch, no more alert

Signed-off-by: Chris Cormack <chrisc@catalyst.net.nz>

Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de>

Signed-off-by: Brendan Gallagher <brendan@bywatersolutions.com>
(cherry picked from commit eb543a9084)
Signed-off-by: Frédéric Demians <f.demians@tamil.fr>
 		2016-08-05 08:16:55 +02:00
C4 Bug 16436 [QA Followup] - Use debug instead of info 2016-08-05 07:50:00 +02:00
Koha Bug 16166: Improve L1 cache performance and safety 2016-08-01 11:45:06 +02:00
OpenILS
…
acqui Bug 16737 - Error when deleting EDIFACT message 2016-08-01 09:23:29 +02:00
admin Bug 16431: Use Koha::Cache to cache marc subfield structure 2016-08-01 10:34:57 +02:00
api/v1 Bug 16271: Allow more filters on /api/v1/holds 2016-08-01 11:11:13 +02:00
authorities Bug 16154: CGI->multi_param - Force scalar context 2016-04-26 23:16:43 +00:00
basket Bug 16447: Remove occurrence of the borrow permission which does no longer exist 2016-05-05 21:28:14 +00:00
catalogue Bug 16490 - Add an "add to cart" link for each search results in the staff client 2016-08-01 10:10:14 +02:00
cataloguing Bug 16807 - Use Koha::BiblioFrameworks instead of GetFrameWorkLoop 2016-08-01 10:43:05 +02:00
circ Bug 15172: Serial enumchron/sequence not visible when returning/checking in Items 2016-08-01 11:10:16 +02:00
course_reserves Bug 16154: CGI->multi_param - Force scalar context 2016-04-26 23:16:43 +00:00
debian Bug 17017 Dependency fixes for 16.05 2016-08-02 17:24:50 +02:00
docs Bug 7143 : More new devs 2016-08-01 13:31:23 +02:00
errors Bug 15288: Error pages: Code duplication removal and better translatability 2016-01-27 05:57:34 +00:00
etc Bug 16777: Correct intranet search alias 2016-08-01 13:31:22 +02:00
install_misc Bug 16770: Remove 2 other occurrences of libmemoize-memcached-perl 2016-08-01 10:20:51 +02:00
installer Bug 16573 - DBRev 16.05.02.001 2016-08-05 07:23:55 +02:00
koha-tmpl Bug 17023: Fix XSS in acqui/z3950_search.pl 2016-08-05 08:16:55 +02:00
labels Bug 16154: CGI->multi_param - Assign a list 2016-04-26 23:16:43 +00:00
members Bug 16847: Remove C4::Members::GetTitles 2016-08-01 13:35:05 +02:00
misc Translation for 16.05.02 2016-08-01 15:54:23 +02:00
offline_circ Bug 15764: Fix timestamp sent by KOCT 2016-02-23 20:53:18 +00:00
opac Bug 16847: Remove C4::Members::GetTitles 2016-08-01 13:35:05 +02:00
patron_lists Bug 16154: CGI->multi_param - Force scalar context 2016-04-26 23:16:43 +00:00
patroncards Bug 14138: Patroncard: Warn user if PDF creation fails 2016-08-01 13:31:21 +02:00
plugins Bug 14951: Remove C4::Dates from plugins/*.pl files 2015-10-06 10:29:42 -03:00
reports Bug 16760: fix Circulation Statistics wizard under Plack 2016-08-01 10:37:35 +02:00
reserve Bug 17028: Fix XSS in reserve/request.pl 2016-08-05 08:11:00 +02:00
reviews
…
rotating_collections Bug 15066: Make transfer rotating collection works under Plack 2015-11-05 09:50:09 -03:00
serials Bug 12178: Update serial status to "claimed" when exporting to CSV 2016-08-01 11:49:39 +02:00
services
…
skel
…
sms Bug 15258: Fix Perl scripts declaring unused variables 2015-12-30 17:24:45 -07:00
suggestion Bug 16154: CGI->multi_param - Declare a list 2016-04-26 23:16:42 +00:00
svc Bug 16508: Updating a syspref requires parameters_remaining_permissions 2016-06-15 08:16:15 +02:00
t Bug 16934: Add test for ModOrder 2016-08-01 13:31:23 +02:00
tags Bug 16154: CGI->multi_param - Assign a list 2016-04-26 23:16:43 +00:00
test Bug 9819 - 'stopwords'-related code removed 2015-12-30 15:49:35 +00:00
tmp/modified_authorities
…
tools Bug 16681 - Allow update of opacnote via batch patron modification tool 2016-08-01 13:31:22 +02:00
virtualshelves Bug 16484 - Virtualshelves: Using no XSLTResultsDisplay breaks content display in intranet 2016-05-23 17:25:24 +00:00
xt Bug 16174: (QA followup) Fix remaining tests 2016-04-01 19:11:33 +00:00
.editorconfig
…
.htaccess
…
.mailmap
…
INSTALL
…
INSTALL.debian
…
INSTALL.fedora7 Bug 13642 - Remove MARC::Crosswalk::DublinCore from Koha 2016-01-27 06:23:08 +00:00
INSTALL.opensuse
…
INSTALL.ubuntu
…
Koha.pm Bug 16573 - DBRev 16.05.02.001 2016-08-05 07:23:55 +02:00
LICENSE
…
MANIFEST.SKIP
…
Makefile.PL Bug 16770: Remove Memoize::Memcached dependency 2016-08-01 10:20:05 +02:00
README
…
README.md Bug 15465 [QA Followup] - Update wording, switch logo, add links 2016-02-24 04:02:26 +00:00
README.robots
…
about.pl Bug 12721 - Syspref StatisticsFields: Warning on About page and text change in System preferences 2016-04-29 02:48:30 +00:00
changelanguage.pl
…
edithelp.pl Bug 16447: Remove occurrence of the borrow permission which does no longer exist 2016-05-05 21:28:14 +00:00
fix-perl-path.PL
…
help.pl Bug 16724: Fix link to the online documentation links 2016-08-01 09:22:30 +02:00
install-CPAN.pl
…
koha_perl_deps.pl
…
kohaversion.pl
…
mainpage.pl Bug 15548: Move new patron related code to Patron* 2016-03-03 14:38:26 -07:00
rewrite-config.PL Bug 16222: (QA followup) Add /api dir for the API 2016-04-20 21:18:36 +00:00

README.md

Koha is a free software integrated library system (ILS).

Koha is distributed under the GNU GPL version 3 or later.

Note: This is a synced mirror of the official Koha repo.

Note: Koha does not accept pull requests from git hosting sites.

Note: This project has its own bug tracker, to report a bug or submit a patch visit http://bugs.koha-comminity.org.

For guidelines on submitting patches for Koha please visit https://wiki.koha-community.org/wiki/SubmitingAPatch

The developers handbook can be found at https://wiki.koha-community.org/wiki/Developer_handbook

http://koha-community.org/

Koha Logo