Katrin Fischer 2d30845601 Bug 19125: Fix Stored XSS in members.pl ... In preparation to test this patch: - Add a patron list named <script>alert("patron list")</script> - Add a library named <script>alert("library")</script> - Add a patron category named <script>alert("patron category")</script> To test: - Access patron search page and do a search - Verify that the alerts added above are executed - Apply patch - Verify that no alerts are displayed Signed-off-by: Amit Gupta <amit.gupta@informaticsglobal.com> Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>		2017-09-29 12:20:45 -03:00
..
tables	Bug 16239: Update templates	2017-01-13 14:41:22 +00:00
boraccount.tt	Bug 18263: Make use of syspref 'CurrencyFormat' for Account and Pay fines tables	2017-03-31 13:47:41 +00:00
deletemem.tt
discharge.tt
discharges.tt	Bug 15758: Koha::Libraries - Remove GetBranchName	2016-09-08 14:36:01 +00:00
files.tt	Bug 18656 - Require confirmation of deletion of files from patron record	2017-06-12 11:11:13 -03:00
housebound.tt	Bug 17847: Replace C4::Koha::GetAuthvalueDropbox with Koha::AuthorisedValues	2017-03-31 10:12:37 +00:00
mancredit.tt	Bug 4041: Third step - Display address on patron's pages using the system preference	2015-04-29 11:25:11 -03:00
maninvoice.tt	Bug 17014: Simplify some code	2017-03-31 14:33:52 +00:00
member-flags.tt	Bug 17905: FIX CSRF in member-flags	2017-01-30 11:24:12 +00:00
member-password.tt
member.tt	Bug 19125: Fix Stored XSS in members.pl	2017-09-29 12:20:45 -03:00
memberentrygen.tt	Bug 18621: Added in value attribute to dateexpiry field	2017-09-01 13:02:24 -03:00
members-update.tt	Bug 18703 - Translatability: Resolve some remaining %%] problems for staff client in 6 Files	2017-06-16 17:04:08 -03:00
moremember-brief.tt	Bug 19129 - Follow-up - Add changes to patron duplicate warning	2017-09-01 13:02:23 -03:00
moremember-print.tt	Bug 17014 - Remove more event attributes from patron templates	2017-03-31 14:33:51 +00:00
moremember-receipt.tt	Bug 17014 - Remove more event attributes from patron templates	2017-03-31 14:33:51 +00:00
moremember.tt	Bug 19129 - Clean up Details tab for Organisation patrons	2017-09-01 13:02:23 -03:00
nl-search.tt
notices.tt	Bug 18439 - Resend button for notices being hidden by CSS and never unhidden	2017-04-21 07:32:23 -04:00
pay.tt	Bug 18263: Make use of syspref 'CurrencyFormat' for Account and Pay fines tables	2017-03-31 13:47:41 +00:00
paycollect.tt	Bug 19208 - Pay select option doesn't pay the selected fine	2017-09-01 13:00:04 -03:00
printfeercpt.tt	Bug 17014 - Remove more event attributes from patron templates	2017-03-31 14:33:51 +00:00
printinvoice.tt	Bug 17014 - Remove more event attributes from patron templates	2017-03-31 14:33:51 +00:00
purchase-suggestions.tt	Bug 16239: Update templates	2017-01-13 14:41:22 +00:00
readingrec.tt	Bug 16478: Fix checkout history tabs - intranet	2016-05-23 17:22:04 +00:00
routing-lists.tt
statistics.tt	Bug 19080: Handle non-existing patrons gratefully	2017-08-25 11:03:37 -03:00
update-child.tt