[Koha-bugs] [Bug 23774] New: When placing a hold editing using Inspect Element allows addition to the code of non listed library

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23774

            Bug ID: 23774
           Summary: When placing a hold editing using Inspect Element
                    allows addition to the code of non listed library
 Change sponsored?: ---
           Product: Koha
           Version: 18.11
          Hardware: All
                OS: All
            Status: NEW
          Severity: major
          Priority: P5 - low
         Component: Circulation
          Assignee: koha-bugs at lists.koha-community.org
          Reporter: pm at interleaf.ie
        QA Contact: testopia at bugs.koha-community.org
                CC: gmcharlt at gmail.com, kyle.m.hall at gmail.com

While placing a hold on a book, if a user opens up Inspect Element on the Pick
up location drop down box they can change the pick up location in the code to a
library that is not listed as a pick up location.

How to replicate:
Search for a book
Select book
Click Place Hold

On the screen Home > Placing a hold

Right click on Pick up location
Select 'Inspect Element'

Under 
<!-- HOLDABLE -->

<li class="Branch">
<select name="Branch ******"> Pick Up location:</label>=$0

Option values are listed that relate to the pick up location, this value can be
changed to another new location and when the hold is placed the hold will be
placed for this new location instead of the listed options in the Pick up
location drop down list.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.