October 2012 - Koha-bugs - lists.koha-community.org

[Bug 4118] Add Collection Code to Statistics Table
by bugzilla-daemon＠bugs.koha-community.org 16 Oct '12

16 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4118 Jonathan Druart <jonathan.druart(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Signed Off |Passed QA --- Comment #26 from Jonathan Druart <jonathan.druart(a)biblibre.com> --- Add the new field statistics.ccode to kohastructure. Marked as Passed QA. -- You are receiving this mail because: You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 15 Oct '12

15 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs Signoff |Signed Off -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 15 Oct '12

15 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #12823|0 |1 is obsolete| | --- Comment #34 from Chris Cormack <chris(a)bigballofwax.co.nz> --- Created attachment 12836 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=12836&action=edit Bug 3652: close XSS vulnerabilities in opac-export The opac-export.pl script had a number of XSS vulnerabilities relating to its error handling. To test: 1) Go to /cgi-bin/koha/opac-export.pl?op=export&bib=2&format=<h2>evil</h2> (substituting a valid biblionumber for the '2') 2) Notice that "evil" is rendered as an h2 heading. 3) Apply patch. 4) Notice that you now see the h2 tags, and they are not rendered by the browser. Signed-off-by: Chris Cormack <chrisc(a)catalyst.net.nz> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 15 Oct '12

15 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #12820|0 |1 is obsolete| | --- Comment #33 from Chris Cormack <chris(a)bigballofwax.co.nz> --- Created attachment 12835 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=12835&action=edit Bug 3652: close XSS vulnerabilities on biblionumber and authid Previously we did not sanitize biblionumber and authids passed in by the user. To test: 1) Go to /cgi-bin/koha/opac-detail.pl?biblionumber=2hi (substituting a valid biblionumber for the 2). 2) Notice the presence of "2hi" on this page, and also on the ISBD and MARC views. 3) Go to /cgi-bin/koha/opac-authoritiesdetail.pl?authid=2bye (substituting a valid authid for the 2). 4) Notice the presence of "2bye" on this page. 3) Apply patch. 4) Notice that "2hi" and "2bye" strings are gone. Signed-off-by: Chris Cormack <chrisc(a)catalyst.net.nz> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 2046] Suggestions: Title Field too small
by bugzilla-daemon＠bugs.koha-community.org 15 Oct '12

15 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2046 Nicole C. Engard <nengard(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Version|master |rel_3_10 Resolution|FIXED |--- --- Comment #1 from Nicole C. Engard <nengard(a)gmail.com> --- At some point this field was changed back to only 80 characters ... and the text field in the OPAC is limited to only 50 cgi-bin/koha/opac-suggestions.pl?op=add Titles can be very long ... and this 50/80 character limit is too small. Nicole -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 15 Oct '12

15 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 --- Comment #32 from Jared Camins-Esakov <jcamins(a)cpbibliography.com> --- Created attachment 12823 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=12823&action=edit Bug 3652: close XSS vulnerabilities in opac-export The opac-export.pl script had a number of XSS vulnerabilities relating to its error handling. To test: 1) Go to /cgi-bin/koha/opac-export.pl?op=export&bib=2&format=<h2>evil</h2> (substituting a valid biblionumber for the '2') 2) Notice that "evil" is rendered as an h2 heading. 3) Apply patch. 4) Notice that you now see the h2 tags, and they are not rendered by the browser. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 15 Oct '12

15 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 --- Comment #31 from Jared Camins-Esakov <jcamins(a)cpbibliography.com> --- Created attachment 12820 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=12820&action=edit Bug 3652: close XSS vulnerabilities on biblionumber and authid Previously we did not sanitize biblionumber and authids passed in by the user. To test: 1) Go to /cgi-bin/koha/opac-detail.pl?biblionumber=2hi (substituting a valid biblionumber for the 2). 2) Notice the presence of "2hi" on this page, and also on the ISBD and MARC views. 3) Go to /cgi-bin/koha/opac-authoritiesdetail.pl?authid=2bye (substituting a valid authid for the 2). 4) Notice the presence of "2bye" on this page. 3) Apply patch. 4) Notice that "2hi" and "2bye" strings are gone. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 15 Oct '12

15 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 Jared Camins-Esakov <jcamins(a)cpbibliography.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Signed Off |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 7992] New: new plugin about Automatic Number incrementing inventory. Prefix management from a authorised values list
by bugzilla-daemon＠bugs.koha-community.org 15 Oct '12

15 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7992 Priority: P5 - low Change sponsored?: --- Bug ID: 7992 Assignee: gmcharlt(a)gmail.com Summary: new plugin about Automatic Number incrementing inventory. Prefix management from a authorised values list QA Contact: koha.sekjal(a)gmail.com Severity: enhancement Classification: Unclassified OS: All Reporter: stephane.delaye(a)biblibre.com Hardware: All Status: NEW Version: rel_3_8 Component: Cataloging Product: Koha The plugin koha about the Automatic Number incrementing inventory are not perfect So I suggest a new plugin which offers more opportunities. Automatic Number incrementing inventory. Prefix management from a authorised values list 1 / Create a list of authorised values(INVENTORY_NUMBER). In which the code is the prefix and the description the last number assigned. 2/A space between the prefix and number. 3 / From a holding record, after indicate the prefix when you click on the plugin -> koha search the last number from authorised values assigned in the list and increment n +1 level meter (description) -- You are receiving this mail because: You are watching all bug changes.

1 36

[Bug 7583] New: undo receive
by bugzilla-daemon＠bugs.koha-community.org 15 Oct '12

15 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7583 Bug #: 7583 Summary: undo receive Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 - low Component: Acquisitions AssignedTo: henridamien(a)koha-fr.org ReportedBy: nengard(a)gmail.com QAContact: koha.sekjal(a)gmail.com It would be nice to be able to unreceive an item in acquisitions - or undo a receipt if you happen to have clicked the wrong title or a title by accident -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 27