[Koha-bugs] [Bug 35072] Invalid usage of "& " in JavaScript intranet-tmpl script redirects

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Tue Oct 17 15:19:06 CEST 2023


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35072

--- Comment #6 from M <schodkowy.omegi-0r at icloud.com> ---
In default setup:

- When making a request to delete biblio record, open up devtools (enable
persistent request saving in Network tab), and look at what request browser is
making (it should not have & in the url, just &)

- Observe the same in Apache2 logs in /var/log/koha

Our actual setup currently uses serveo.net to create a simple tunnel to access
Koha over the internet, as we haven't set up proper redirection *yet*, and this
is setup so that staff can work on the database until it's ready to move to the
proper server. Generally this setup works great, but the URLs are sanitized and
so invalid parameter is removed.

You can try for yourself as the site doesn't require an account and you just
use appropriate SSH command to set up port redirect and get an address in
return. Use that over the dev setup and try removing a biblio record, and then
see what gets logged in Apache2 now (& and afterwards is stripped). Then if
you repeat the same request (Edit and repeat in Firefox devtools, and correct
& to &), you see it will actually work fine then...

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list