October 2012 - Koha-bugs - lists.koha-community.org

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 08 Oct '12

08 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 --- Comment #17 from Chris Cormack <chris(a)bigballofwax.co.nz> --- Sorry forgot to mention this only shows up when you dont have permission to view the list -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 08 Oct '12

08 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 08 Oct '12

08 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 --- Comment #16 from Chris Cormack <chris(a)bigballofwax.co.nz> --- Created attachment 12728 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=12728&action=edit Bug 3652 : [SECURITY] XSS vulnerability -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 08 Oct '12

08 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #15 from Chris Cormack <chris(a)bigballofwax.co.nz> --- XSS vulnerability when viewing shelves. To test 1/ Visit /cgi-bin/koha/opac-shelves.pl?viewshelf=<blink>fish</blink>&sortfield=1 After patch this should no longer be blinking -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 8497] New: Strange behavior when modifying the 'timeout' system preference.
by bugzilla-daemon＠bugs.koha-community.org 06 Oct '12

06 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8497 Priority: P5 - low Change sponsored?: --- Bug ID: 8497 CC: gmcharlt(a)gmail.com Assignee: koha-bugs(a)lists.koha-community.org Summary: Strange behavior when modifying the 'timeout' system preference. Severity: enhancement Classification: Unclassified OS: All Reporter: kyle(a)bywatersolutions.com Hardware: All Status: NEW Version: master Component: System Administration Product: Koha The timeout system preference works fine, until I try to define the timeout in days ( e.g. '1d', or '3d' ). Once I have done so, I cannot change it to anything else. I get an error message from the pref system that says I'm logged out and need to log back in. If I click a link, I'm brought to the login page. If I log back in and try to modify the preference, I will get another 'not logged in' message and will start the loop all over again. If I edit the db row directly and change the value back to an integer, everything goes back to normal. I can modify the pref as much as I want, as long as it is an integer. As soon as I use the 'd' option, everything goes haywire again. I noticed in the database, 'timeout' is set to 'Integer'. I tried changing it to 'free' but that did not make a difference. If I dump the value of $timeout in C4::Auth::checkauth, it appears to be correct, even when using the 'd' option, but I end up logged out every time. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 9

[Bug 8810] New: Opac: Cart should display branchname instead of branchcode
by bugzilla-daemon＠bugs.koha-community.org 06 Oct '12

06 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8810 Priority: P5 - low Change sponsored?: --- Bug ID: 8810 Assignee: oleonard(a)myacpl.org Summary: Opac: Cart should display branchname instead of branchcode Severity: normal Classification: Unclassified OS: All Reporter: veron(a)veron.ch Hardware: All Status: NEW Version: master Component: OPAC Product: Koha Created attachment 12469 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=12469&action=edit Opac cart displays branchcode In Opac, the cart should display the banchname instead of the branchcode (see screenshot). Reasons: - Branchcode is an internal key. Patrons dont necessarily know their meaning. - The name of the branch can change and the original meaning of the branchcode could be lost (that happened to us and we need a solution asap). Since branchcode is used as database key as well it would be very difficult to change it in all the tables. B.T.W. something similar was made with Bug 3292 (regarding serials) Patch follows. Marc -- You are receiving this mail because: You are watching all bug changes.

1 11

[Bug 8379] New: Encoding problem under Plack
by bugzilla-daemon＠bugs.koha-community.org 06 Oct '12

06 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8379 Priority: P5 - low Change sponsored?: --- Bug ID: 8379 CC: dpavlin(a)rot13.org, gmcharlt(a)gmail.com Assignee: koha-bugs(a)lists.koha-community.org Summary: Encoding problem under Plack Severity: enhancement Classification: Unclassified OS: All Reporter: paul.poulain(a)biblibre.com Hardware: All Status: NEW Version: master Component: Staff Client Product: Koha Created attachment 10670 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=10670&action=edit encoding is wrong Playing with Plack on staff interface, I just got an encoding problem (see attachment). It's the 1st time I saw this problem, I stopped & restarted plack, and it worked again smoothly. No idea why/what make this happen... Note = I applied/pushed some patches witout restarting plack, I don't think it's related, but just in case... -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 19

[Bug 3087] Z39.50 server returns usmarc format records for UNIMARC DB
by bugzilla-daemon＠bugs.koha-community.org 06 Oct '12

06 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3087 Frédéric Demians <frederic(a)tamil.fr> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - low |P3 Status|Failed QA |Needs Signoff Version|rel_3_2 |rel_3_10 --- Comment #20 from Frédéric Demians <frederic(a)tamil.fr> --- I don't see what prevent this patch being applied on 3.10. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 8881] New: tool to purge action logs
by bugzilla-daemon＠bugs.koha-community.org 05 Oct '12

05 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8881 Priority: P5 - low Change sponsored?: --- Bug ID: 8881 Assignee: gmcharlt(a)gmail.com Summary: tool to purge action logs Severity: enhancement Classification: Unclassified OS: All Reporter: nengard(a)gmail.com Hardware: All Status: NEW Version: master Component: Tools Product: Koha It would be great if there were a tool that you could use to purge your action logs from time to time. It would need a way to choose which log to purge and when to purge it from. When you have the logs on it can make that table pretty big pretty darn fast and slow things down. Right now we do this via MySQL, but a tool that lets the library staff do it themselves would be great. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 2629] Diacritics not being ignored when searching
by bugzilla-daemon＠bugs.koha-community.org 05 Oct '12

05 Oct '12

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2629 Marc Véron <veron(a)veron.ch> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |veron(a)veron.ch --- Comment #42 from Marc Véron <veron(a)veron.ch> --- Applying the patch gives following error: fatal: cannot convert from UTF-8utf-8 to UTF-8 It seems that the patch maps this letter twice? See line 1, 3 and 5 snip: ---snip--- -map ů u -map Ů u +map ů u +map Ů u +map ů u ---snip--- -- You are receiving this mail because: You are watching all bug changes.

1 0