Back to bug 13618

Who When What Removed Added
jonathan.druart 2015-01-23 10:43:29 UTC See Also http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13609, http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13510, http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13425, http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11341, http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13426
jonathan.druart 2015-01-23 10:43:43 UTC Status NEW In Discussion
katrin.fischer 2015-01-26 18:42:31 UTC CC katrin.fischer
tomascohen 2015-01-26 19:00:10 UTC CC tomascohen
veron 2015-01-28 10:58:32 UTC CC veron
fridolin.somers 2015-01-30 16:36:01 UTC CC fridolyn.somers
chris 2015-06-22 10:13:05 UTC CC chris
jonathan.druart 2015-06-22 14:59:39 UTC Status In Discussion Needs Signoff
jonathan.druart 2015-06-22 14:59:43 UTC Attachment #35488 Attachment is obsolete 0 1
Attachment #35516 Attachment is obsolete 0 1
jonathan.druart 2015-06-22 15:00:29 UTC Assignee oleonard jonathan.druart
jonathan.druart 2015-06-22 15:00:47 UTC Depends on 14412
jonathan.druart 2015-06-22 15:01:42 UTC Depends on 14416, 14418, 14423
jonathan.druart 2015-06-22 16:07:00 UTC See Also http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14435
dcook 2015-06-23 08:11:29 UTC CC dcook
mtompset 2015-07-03 00:25:08 UTC CC mtompset
Summary Prevent XSS everywhere at the OPAC Prevent XSS in the Staff Client and the OPAC
chris 2015-07-20 11:44:20 UTC Blocks 14568
tomascohen 2015-07-29 18:45:24 UTC Status Needs Signoff Patch doesn't apply
jonathan.druart 2015-08-04 14:22:43 UTC Attachment #40480 Attachment is obsolete 0 1
jonathan.druart 2015-08-04 14:22:53 UTC Attachment #40481 Attachment is obsolete 0 1
jonathan.druart 2015-08-04 14:22:59 UTC Attachment #40482 Attachment is obsolete 0 1
jonathan.druart 2015-08-04 14:23:14 UTC Attachment #40483 Attachment is obsolete 0 1
jonathan.druart 2015-08-04 14:23:20 UTC Attachment #40484 Attachment is obsolete 0 1
jonathan.druart 2015-08-04 14:23:27 UTC Attachment #40485 Attachment is obsolete 0 1
jonathan.druart 2015-08-04 14:23:37 UTC Attachment #40487 Attachment is obsolete 0 1
jonathan.druart 2015-08-04 14:24:36 UTC Status Patch doesn't apply Needs Signoff
jonathan.druart 2015-08-04 14:40:35 UTC Status Needs Signoff ASSIGNED
jonathan.druart 2015-08-04 14:53:34 UTC Status ASSIGNED Needs Signoff
jonathan.druart 2015-08-04 14:58:46 UTC Status Needs Signoff ASSIGNED
jonathan.druart 2015-08-04 15:12:32 UTC Status ASSIGNED Needs Signoff
gwilliams 2015-08-19 19:33:50 UTC CC hbraum
liz 2015-08-20 21:38:29 UTC CC liz
liz 2015-08-20 23:05:29 UTC Attachment #41746 Attachment is obsolete 0 1
joonas.kylmala 2015-08-28 09:54:39 UTC Attachment #41346 Attachment is obsolete 0 1
joonas.kylmala 2015-08-28 11:31:43 UTC CC j.kylmala
jonathan.druart 2015-08-28 12:01:48 UTC Attachment #41776 Attachment is obsolete 0 1
joonas.kylmala 2015-08-28 12:50:01 UTC Attachment #42073 Attachment is obsolete 0 1
joonas.kylmala 2015-08-28 12:51:54 UTC Patch complexity --- Medium patch
joonas.kylmala 2015-08-28 13:11:37 UTC Attachment #41350 Attachment is obsolete 0 1
joonas.kylmala 2015-08-28 13:18:19 UTC Attachment #42078 Attachment description Fixed the plain texts. Bug 13618: Specific places where we don't need to escape
variables - intra
joonas.kylmala 2015-08-28 15:24:41 UTC Attachment #42079 Attachment is obsolete 0 1
joonas.kylmala 2015-08-29 07:34:51 UTC Attachment #42072 Attachment is obsolete 0 1
joonas.kylmala 2015-08-29 07:36:07 UTC Attachment #42009 Attachment is obsolete 0 1
joonas.kylmala 2015-08-29 07:37:07 UTC Attachment #41352 Attachment is obsolete 0 1
joonas.kylmala 2015-08-29 08:09:06 UTC Attachment #41351 Attachment is obsolete 0 1
joonas.kylmala 2015-08-29 08:20:51 UTC Attachment #41348 Attachment is obsolete 0 1
joonas.kylmala 2015-08-29 08:24:14 UTC Attachment #41355 Attachment is obsolete 0 1
joonas.kylmala 2015-08-29 08:37:59 UTC Attachment #42093 Attachment is obsolete 0 1
joonas.kylmala 2015-08-29 09:22:16 UTC Attachment #41349 Attachment is obsolete 0 1
liz 2015-11-06 01:56:39 UTC Blocks 14744
bgkriegel 2015-11-17 18:09:51 UTC CC bgkriegel
bgkriegel 2015-11-25 18:42:23 UTC Status Needs Signoff Signed Off
bgkriegel 2015-11-28 14:15:34 UTC Status Signed Off In Discussion
jonathan.druart 2015-12-01 13:04:40 UTC Status In Discussion Needs Signoff
jonathan.druart 2015-12-08 10:54:37 UTC Severity normal major
jonathan.druart 2015-12-17 10:44:10 UTC URL https://github.com/joubu/Koha/tree/bug_13618
bgkriegel 2015-12-17 12:34:11 UTC Status Needs Signoff Signed Off
katrin.fischer 2015-12-17 21:51:05 UTC Status Signed Off Failed QA
jonathan.druart 2015-12-18 09:27:27 UTC Status Failed QA Signed Off
katrin.fischer 2016-01-06 18:38:17 UTC CC gmcharlt
Keywords dependency
katrin.fischer 2016-01-06 19:47:03 UTC Status Signed Off Failed QA
gmcharlt 2016-01-06 20:09:00 UTC Severity major enhancement
jonathan.druart 2016-01-07 09:45:29 UTC Status Failed QA Signed Off
katrin.fischer 2016-01-11 21:12:36 UTC Status Signed Off Failed QA
jonathan.druart 2016-01-12 15:52:17 UTC Status Failed QA Signed Off
katrin.fischer 2016-01-18 07:29:05 UTC Status Signed Off Passed QA
katrin.fischer 2016-01-18 07:30:02 UTC Attachment #41347 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:30:06 UTC Attachment #42054 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:30:09 UTC Attachment #42087 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:30:12 UTC Attachment #41353 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:30:15 UTC Attachment #41354 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:30:19 UTC Attachment #42091 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:30:22 UTC Attachment #42092 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:30:25 UTC Attachment #42094 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:30:28 UTC Attachment #42095 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:30:31 UTC Attachment #42096 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:30:34 UTC Attachment #41747 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:30:37 UTC Attachment #42075 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:30:41 UTC Attachment #42090 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:30:44 UTC Attachment #42078 Attachment description Bug 13618: Specific places where we don't need to escape
variables - intra
Bug 13618: Specific places where we don't need to escape
variables - intra
Attachment #42078 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:31:41 UTC Attachment #42097 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:31:45 UTC Attachment #45788 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:31:48 UTC Attachment #45141 Attachment is obsolete 0 1
katrin.fischer 2016-01-18 07:32:45 UTC Comment 113 Tag obsolete
jonathan.druart 2016-01-18 11:44:36 UTC Attachment #46767 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:44:41 UTC Attachment #46768 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:44:45 UTC Attachment #46769 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:44:51 UTC Attachment #46770 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:44:55 UTC Attachment #46771 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:44:59 UTC Attachment #46772 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:45:04 UTC Attachment #46773 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:45:08 UTC Attachment #46774 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:45:13 UTC Attachment #46775 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:45:17 UTC Attachment #46776 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:45:22 UTC Attachment #46777 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:45:26 UTC Attachment #46778 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:45:30 UTC Attachment #46779 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:45:35 UTC Attachment #46780 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:45:39 UTC Attachment #46781 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:45:44 UTC Attachment #46782 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:45:48 UTC Attachment #46783 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:45:53 UTC Attachment #46784 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:45:58 UTC Attachment #46785 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:46:02 UTC Attachment #46786 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:46:07 UTC Attachment #46787 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:46:11 UTC Attachment #46788 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:46:15 UTC Attachment #46789 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:46:20 UTC Attachment #46790 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:46:24 UTC Attachment #46791 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:46:28 UTC Attachment #46792 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:46:33 UTC Attachment #46793 Attachment is obsolete 0 1
jonathan.druart 2016-01-18 11:46:37 UTC Attachment #46794 Attachment is obsolete 0 1
kyle 2016-01-28 16:19:58 UTC CC kyle
Status Passed QA Patch doesn't apply
jonathan.druart 2016-01-29 09:53:44 UTC Attachment #46795 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:53:50 UTC Attachment #46796 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:53:55 UTC Attachment #46797 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:54:02 UTC Attachment #46798 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:54:07 UTC Attachment #46799 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:54:12 UTC Attachment #46800 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:54:18 UTC Attachment #46801 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:54:23 UTC Attachment #46802 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:54:28 UTC Attachment #46803 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:54:33 UTC Attachment #46804 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:54:39 UTC Attachment #46805 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:54:44 UTC Attachment #46806 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:54:49 UTC Attachment #46807 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:54:55 UTC Attachment #46808 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:55:00 UTC Attachment #46809 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:55:06 UTC Attachment #46810 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:55:11 UTC Attachment #46811 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:55:17 UTC Attachment #46812 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:55:22 UTC Attachment #46813 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:55:28 UTC Attachment #46814 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:55:33 UTC Attachment #46815 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:55:38 UTC Attachment #46816 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:55:44 UTC Attachment #46817 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:55:49 UTC Attachment #46818 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:55:55 UTC Attachment #46819 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:56:03 UTC Attachment #46820 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:56:09 UTC Attachment #46821 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:56:14 UTC Attachment #46822 Attachment is obsolete 0 1
jonathan.druart 2016-01-29 09:57:23 UTC Status Patch doesn't apply Passed QA
brendan 2016-01-29 17:47:50 UTC CC brendan
brendan 2016-01-29 18:18:44 UTC Status Passed QA Pushed to Master
m.de.rooy 2016-02-01 08:03:45 UTC CC m.de.rooy
jonathan.druart 2016-02-02 09:43:54 UTC Blocks 15717
julian.maurice 2016-02-03 10:49:25 UTC CC julian.maurice
mirko 2016-02-04 06:08:29 UTC CC mirko
jonathan.druart 2016-02-04 08:27:38 UTC Blocks 15733
jonathan.druart 2016-02-08 12:00:22 UTC Blocks 15734
jonathan.druart 2016-02-08 12:02:19 UTC Blocks 15754
jonathan.druart 2016-02-09 15:41:10 UTC Blocks 15771
jonathan.druart 2016-02-10 11:23:46 UTC See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15715
brendan 2016-02-11 19:45:08 UTC Status Pushed to Master BLOCKED
jonathan.druart 2016-08-02 14:15:00 UTC Blocks 14568
martin.renvoize 2017-02-07 14:52:35 UTC CC martin.renvoize
jonathan.druart 2017-02-07 15:49:35 UTC Status BLOCKED Needs Signoff
jonathan.druart 2017-02-07 15:49:43 UTC Attachment #47425 Attachment is obsolete 0 1
Attachment #47426 Attachment is obsolete 0 1
Attachment #47427 Attachment is obsolete 0 1
Attachment #47428 Attachment is obsolete 0 1
Attachment #47429 Attachment is obsolete 0 1
Attachment #47430 Attachment is obsolete 0 1
Attachment #47431 Attachment is obsolete 0 1
Attachment #47432 Attachment is obsolete 0 1
Attachment #47433 Attachment is obsolete 0 1
Attachment #47434 Attachment is obsolete 0 1
Attachment #47435 Attachment is obsolete 0 1
Attachment #47436 Attachment is obsolete 0 1
Attachment #47437 Attachment is obsolete 0 1
Attachment #47438 Attachment is obsolete 0 1
Attachment #47439 Attachment is obsolete 0 1
Attachment #47440 Attachment is obsolete 0 1
Attachment #47441 Attachment is obsolete 0 1
Attachment #47442 Attachment is obsolete 0 1
Attachment #47443 Attachment is obsolete 0 1
Attachment #47444 Attachment is obsolete 0 1
Attachment #47445 Attachment is obsolete 0 1
Attachment #47446 Attachment is obsolete 0 1
Attachment #47447 Attachment is obsolete 0 1
Attachment #47448 Attachment is obsolete 0 1
Attachment #47449 Attachment is obsolete 0 1
Attachment #47450 Attachment is obsolete 0 1
Attachment #47451 Attachment is obsolete 0 1
Attachment #47452 Attachment is obsolete 0 1
jonathan.druart 2017-02-07 16:01:27 UTC Attachment #45784 Attachment is obsolete 0 1
jonathan.druart 2017-02-07 16:01:42 UTC Attachment #45785 Attachment is obsolete 0 1
jonathan.druart 2017-02-07 16:01:57 UTC Attachment #47631 Attachment is obsolete 0 1
jonathan.druart 2017-02-08 07:37:08 UTC Status Needs Signoff ASSIGNED
jonathan.druart 2017-08-15 19:20:35 UTC See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19121
kohadevinim 2017-08-17 08:18:19 UTC CC kohadevinim
george 2018-01-09 14:57:31 UTC CC gwilliams george
jonathan.druart 2018-06-20 15:50:22 UTC Blocks 15771
See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15771
jonathan.druart 2018-06-20 16:49:53 UTC URL https://github.com/joubu/Koha/tree/bug_13618 https://gitlab.com/joubu/Koha/tree/bug_13618
Status ASSIGNED Needs Signoff
jonathan.druart 2018-06-20 16:50:15 UTC Comment 216 Tag obsolete
jonathan.druart 2018-06-20 16:51:17 UTC Attachment #59983 Attachment is obsolete 0 1
jonathan.druart 2018-06-20 16:51:21 UTC Attachment #59984 Attachment is obsolete 0 1
jonathan.druart 2018-06-20 16:51:23 UTC Attachment #59987 Attachment is obsolete 0 1
jonathan.druart 2018-06-21 14:01:46 UTC Blocks 20975
oleonard 2018-08-08 18:26:26 UTC Status Needs Signoff Failed QA
jonathan.druart 2018-08-09 20:38:30 UTC Status Failed QA Needs Signoff
oleonard 2018-08-13 17:06:46 UTC Status Needs Signoff Failed QA
jonathan.druart 2018-08-13 17:33:36 UTC Status Failed QA Needs Signoff
oleonard 2018-08-14 15:24:20 UTC Status Needs Signoff Signed Off
martin.renvoize 2018-08-14 20:35:52 UTC Status Signed Off Passed QA
martin.renvoize 2018-08-14 21:02:48 UTC Attachment #77804 Attachment is obsolete 0 1
jonathan.druart 2018-08-14 21:08:22 UTC Status Passed QA Needs Signoff
jonathan.druart 2018-08-14 21:08:31 UTC Attachment #77805 Attachment is obsolete 0 1
jonathan.druart 2018-08-14 21:13:59 UTC Attachment #77806 Attachment is obsolete 0 1
jonathan.druart 2018-08-14 21:16:02 UTC Status Needs Signoff Signed Off
jonathan.druart 2018-08-14 21:16:22 UTC Status Signed Off Passed QA
jonathan.druart 2018-08-14 21:16:44 UTC Keywords dependency
nick 2018-08-17 17:22:25 UTC CC nick
Status Passed QA Pushed to Master
jonathan.druart 2018-08-17 18:04:06 UTC Attachment #77997 Attachment is obsolete 0 1
nick 2018-08-22 15:12:47 UTC Blocks 21257
ere.maijala 2018-08-27 12:11:08 UTC CC ere.maijala
jonathan.druart 2018-08-29 19:53:21 UTC Blocks 21279
oleonard 2018-08-30 16:42:33 UTC Blocks 21293
jonathan.druart 2018-09-15 20:47:06 UTC Blocks 21347
jonathan.druart 2018-09-21 16:03:21 UTC Blocks 21393
oleonard 2018-09-26 17:50:26 UTC Blocks 21418
nick 2018-09-28 13:30:18 UTC CC amitddng135
martin.renvoize 2018-09-28 13:33:05 UTC Summary Prevent XSS in the Staff Client and the OPAC Add additional filter methods and a filter presence test to reduce the likelihood of new XSS vulnerabilities being introduced going forward.
martin.renvoize 2018-09-28 13:37:50 UTC Text to go in the release notes This important improvement to Koha's security policy greatly decreases the likelihood of new XXS vulnerabilities being introduced into the Koha codebase moving forward. We have introduced the requirement for all variables inside templates to be passed through a filter and added a test to check this requirement is being upheld.
martin.renvoize 2018-09-28 13:38:27 UTC Summary Add additional filter methods and a filter presence test to reduce the likelihood of new XSS vulnerabilities being introduced going forward. Add additional template filter methods and a filter presence test to Koha.
martin.renvoize 2018-09-28 13:39:19 UTC Text to go in the release notes This important improvement to Koha's security policy greatly decreases the likelihood of new XXS vulnerabilities being introduced into the Koha codebase moving forward. We have introduced the requirement for all variables inside templates to be passed through a filter and added a test to check this requirement is being upheld. This important improvement to Koha's security policy greatly decreases the likelihood of new XSS vulnerabilities being introduced into the Koha codebase moving forward. We have introduced the requirement for all variables inside templates to be passed through a filter and added a test to check this requirement is being upheld.
katrin.fischer 2018-09-28 13:48:36 UTC Summary Add additional template filter methods and a filter presence test to Koha. Add additional template filter methods and a filter presence test to Koha
Text to go in the release notes This important improvement to Koha's security policy greatly decreases the likelihood of new XSS vulnerabilities being introduced into the Koha codebase moving forward. We have introduced the requirement for all variables inside templates to be passed through a filter and added a test to check this requirement is being upheld. This important improvement to Koha's security policy greatly decreases the likelihood of XSS vulnerabilities being introduced into the Koha codebase moving forward. We have introduced the requirement for all variables inside templates to be passed through a filter and added a test to check this requirement is being upheld.
jonathan.druart 2018-09-29 16:09:39 UTC Blocks 21454
jonathan.druart 2018-09-29 19:45:24 UTC Blocks 21377
jonathan.druart 2018-10-09 21:28:17 UTC Blocks 21526
oleonard 2018-10-10 15:48:53 UTC Blocks 21541
martin.renvoize 2018-10-15 13:49:46 UTC Blocks 15734
See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15734
martin.renvoize 2018-10-15 15:27:18 UTC Blocks 15734
See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15734
jonathan.druart 2018-10-15 20:14:05 UTC Blocks 21576
martin.renvoize 2018-10-17 10:29:54 UTC Blocks 21279
See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21279
jonathan.druart 2018-10-19 14:27:59 UTC Blocks 21476
jonathan.druart 2018-10-22 20:52:06 UTC Blocks 21529
oleonard 2018-10-25 13:22:51 UTC Blocks 21663
jonathan.druart 2018-10-25 16:06:11 UTC Blocks 21669
katrin.fischer 2018-10-26 16:32:52 UTC Component OPAC Templates
katrin.fischer 2018-10-27 21:12:52 UTC Blocks 21703
tomascohen 2018-10-28 13:28:11 UTC Blocks 21704
katrin.fischer 2018-10-28 22:05:00 UTC Blocks 21706
fridolin.somers 2018-11-29 10:25:47 UTC Blocks 21905
katrin.fischer 2018-12-03 19:42:24 UTC Status Pushed to Master RESOLVED
Resolution --- FIXED
mtompset 2018-12-04 19:10:25 UTC See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21947
jonathan.druart 2018-12-06 16:37:37 UTC Blocks 21947
See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21947
jonathan.druart 2018-12-14 19:28:18 UTC Blocks 22007
marka 2018-12-24 16:51:26 UTC CC marka
marka 2019-01-02 11:19:27 UTC Blocks 22058
martin.renvoize 2019-01-07 15:55:13 UTC Text to go in the release notes This important improvement to Koha's security policy greatly decreases the likelihood of XSS vulnerabilities being introduced into the Koha codebase moving forward. We have introduced the requirement for all variables inside templates to be passed through a filter and added a test to check this requirement is being upheld. RMaint Note: The inclusion of bug 22007 in 18.11.02 means this enhancement bug gets added to the release notes.. It should be removed before release!
jonathan.druart 2019-02-17 13:10:31 UTC See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22342
jonathan.druart 2019-02-19 12:46:30 UTC CC anthony.laquerre
jonathan.druart 2019-03-04 17:53:22 UTC Blocks 22442
jonathan.druart 2019-03-14 22:48:13 UTC See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22478
oleonard 2019-03-20 16:16:08 UTC Blocks 22550
fridolin.somers 2019-03-27 14:37:16 UTC Blocks 22596
nick 2019-03-27 15:21:14 UTC Blocks 22586
nick 2019-04-04 13:43:08 UTC Blocks 22641
jonathan.druart 2019-11-11 18:05:19 UTC Blocks 23777
jonathan.druart 2019-11-26 08:24:36 UTC Blocks 24110
jonathan.druart 2019-11-27 10:30:19 UTC See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19121
jonathan.druart 2020-01-10 08:57:28 UTC Blocks 24371
jonathan.druart 2020-04-06 10:35:57 UTC Blocks 25069
nick 2020-10-30 10:37:20 UTC Blocks 26865
katrin.fischer 2021-06-14 21:28:23 UTC Status RESOLVED CLOSED

Back to bug 13618