~evergreen-bugs/evergreen/rel_3

~evergreen-bugs/evergreen/rel_3_10 » Changes from revision 26534

From Revision 26534 to 26515

Rev	Summary	Authors	Date
26534	Docs: heading and link corrections in staff catalog docs Docs: heading and link corrections in staff catalog docs Release-note: Fixes headings and links in staff catalog docs. Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>	Andrea Buntz Neiman	4 months ago
26533	docs: release notes for 3.10.5 docs: release notes for 3.10.5 Signed-off-by: Jane Sandberg <js7389@princeton.edu> Signed-off-by: Galen Charlton <gmc@equinoxOLI.org>	Jane Sandberg	6 months ago
26532	3.10.4-3.10.5 version upgrade script 3.10.4-3.10.5 version upgrade script Signed-off-by: Galen Charlton <gmc@equinoxOLI.org>	Galen Charlton	6 months ago
26531	LP2019157: Mitigate reflected XSS vulnerability in OPAC LP2019157: Mitigate reflected XSS vulnerability in OPAC To test: 1. If you don't already have a library group, go to Admin > Server > Library Groups and make one that is Global. 2. In your browser, go to [your_domain]/eg/opac/home?locg='><script>alert('bad bad bad')</script> 3. Note that the site executes javascript code that is passed in via the URL. 4. Apply this patch 5. Repeat step 2. 6. Note that the arbitrary js does not get run anymore. 7. Confirm that library group searching still works as expected. Release-note: Mitigate a reflected cross-site scripting (XSS) vulnerability in the public catalog. Signed-off-by: Jane Sandberg <sandbergja@gmail.com> Signed-off-by: Jason Stephenson <jason@sigio.com> Signed-off-by: Galen Charlton <gmc@equinoxOLI.org>	Jane Sandberg	6 months ago
26530	LP2069959: Remove reflected XSS vulnerability from OPAC brow... LP2069959: Remove reflected XSS vulnerability from OPAC browse Release-note: Remediates a reflected Cross-site Scripting (XSS) vulnerability in the public catalog browse feature. With thanks to Jeff Davis, Chris Sharp, Jason Stephenson, and Galen Charlton for their work on the TPAC version of this vulnerability in LP #1822630. To test: 1. Go to /eg/opac/browse?blimit="/><script>alert('BAD')</script> in your browser 2. If you see the notice "BAD" pop up, it means that the page is vulnerable to users adding arbitrary javascript to the URL and having it run in the page. Signed-off-by: Jane Sandberg <js7389@princeton.edu> Signed-off-by: Galen Charlton <gmc@equinoxOLI.org>	Jane Sandberg	6 months ago
26529	lp2070078 (follow-up) make sure subroutine has access to lp2070078 (follow-up) make sure subroutine has access to Signed-off-by: Jane Sandberg <js7389@princeton.edu> Signed-off-by: Galen Charlton <gmc@equinoxOLI.org>	Jane Sandberg	6 months ago
26528	lp2070078: Check event hook before loading; Confirm bib ID(s... lp2070078: Check event hook before loading; Confirm bib ID(s) are actually bibs Release-note: Patch Insecure direct object reference (IDOR) vulnerability for action trigger output in OPAC list printing feature. Signed-off-by: Mike Rylander <mrylander@gmail.com> Signed-off-by: Jane Sandberg <js7389@princeton.edu> Signed-off-by: Galen Charlton <gmc@equinoxOLI.org>	Mike Rylander	6 months ago
26527	Docs: follow up adding top level nav to Angular Staff Cat do... Docs: follow up adding top level nav to Angular Staff Cat docs Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>	Andrea Buntz Neiman	9 months ago
26526	Docs: link fixes for Selection List docs Docs: link fixes for Selection List docs Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>	Andrea Buntz Neiman	9 months ago
26525	Docs: Angular staff catalog documentation Docs: Angular staff catalog documentation Release-note: Adds documentation for the Angular staff catalog, based on documentation produced by Indiana Evergreen. Signed-off-by: Spencer Pennington <spennington@una.edu> Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>	Spencer Pennington	9 months ago
26524	Docs: LP2053050 Updates to strict barcode docs Docs: LP2053050 Updates to strict barcode docs Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org> Signed-off-by: Gina Monti <gmonti@biblio.org>	Gina Monti	9 months ago
26523	Docs: fixes links on Previous Docs page Docs: fixes links on Previous Docs page Signed-off-by: Galen Charlton <gmc@equinoxOLI.org> Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>	Andrea Buntz Neiman	9 months ago
26522	Docs: removing dead link from acq nav Docs: removing dead link from acq nav Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>	Andrea Buntz Neiman	10 months ago
26521	Docs: corrections to acquisitions_search.adoc Docs: corrections to acquisitions_search.adoc Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>	Andrea Buntz Neiman	10 months ago
26520	Docs: Link to update records docs Docs: Link to update records docs Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>	Andrea Buntz Neiman	10 months ago
26519	Docs: LP2048132 follow up for image syntax Docs: LP2048132 follow up for image syntax Updated image syntax for all but one image to pull from correct image folder. Signed-off-by: Susan Morrison <smorrison@georgialibraries.org> Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>	Susan Morrison	11 months ago
26518	Docs: Update statistical categories documenation to reflect ... Docs: Update statistical categories documenation to reflect Angular upgrades LP2048132: https://bugs.launchpad.net/evergreen/+bug/2048132 Signed-off-by: Susan Morrison <smorrison@georgialibraries.org> Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>	Susan Morrison	11 months ago
26517	Docs: Update emergency_closing_handler.adoc Docs: Update emergency_closing_handler.adoc For LP1871692: https://bugs.launchpad.net/evergreen/+bug/1871692 Signed-off-by: Susan Morrison <smorrison@georgialibraries.org> Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>	Susan Morrison	11 months ago
26516	Docs: LP1426120 Best Hold Selection Sort Order updates Docs: LP1426120 Best Hold Selection Sort Order updates Changing some things around for flow. Signed-off-by: Gina Monti <gmonti@biblio.org> Signed-off-by: Jessica Woolford <jwoolford@biblio.org> Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>	Gina Monti	11 months ago
26515	Docs: removing XUL elements from ws-admin page Docs: removing XUL elements from ws-admin page Signed-off-by: Andrea Buntz Neiman <abneiman@equinoxinitiative.org>	Andrea Buntz Neiman	1 year ago

Older »