March 2013 - Koha-bugs - lists.koha-community.org

[Bug 2690] Security Vulnerability Gives me Administrative Access
by bugzilla-daemon＠bugs.koha-community.org 24 Mar '13

24 Mar '13

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2690 Bug 2690 depends on bug 3652, which changed state. Bug 3652 Summary: XSS vulnerabilities http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 2600] HTML tags in titles not escaped in many places
by bugzilla-daemon＠bugs.koha-community.org 24 Mar '13

24 Mar '13

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=2600 Bug 2600 depends on bug 3652, which changed state. Bug 3652 Summary: XSS vulnerabilities http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3652] XSS vulnerabilities
by bugzilla-daemon＠bugs.koha-community.org 24 Mar '13

24 Mar '13

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3652 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #47 from Chris Cormack <chris(a)bigballofwax.co.nz> --- No outstanding vulnerabilities at this time, a new bug can be opened if some are found -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 8945] New: Koha 3.10 Help Files Update
by bugzilla-daemon＠bugs.koha-community.org 23 Mar '13

23 Mar '13

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8945 Priority: P5 - low Change sponsored?: --- Bug ID: 8945 Assignee: nengard(a)gmail.com Summary: Koha 3.10 Help Files Update Severity: major Classification: Unclassified OS: All Reporter: nengard(a)gmail.com Hardware: All Status: ASSIGNED Version: rel_3_10 Component: Documentation Product: Koha This will be my standing bug for Koha 3.10 help file updates. Nicole -- You are receiving this mail because: You are watching all bug changes.

1 107

[Bug 9914] New: Dependency updates for 3.12
by bugzilla-daemon＠bugs.koha-community.org 23 Mar '13

23 Mar '13

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9914 Bug ID: 9914 Summary: Dependency updates for 3.12 Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: blocker Priority: P5 - low Component: Installation and upgrade (command-line installer) Assignee: jcamins(a)cpbibliography.com Reporter: jcamins(a)cpbibliography.com -- You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 9912] New: DateUtils.t must not access database
by bugzilla-daemon＠bugs.koha-community.org 23 Mar '13

23 Mar '13

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9912 Bug ID: 9912 Summary: DateUtils.t must not access database Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: blocker Priority: P5 - low Component: Test Suite Assignee: jcamins(a)cpbibliography.com Reporter: jcamins(a)cpbibliography.com -- You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 9911] New: Remove two invalid tests
by bugzilla-daemon＠bugs.koha-community.org 23 Mar '13

23 Mar '13

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9911 Bug ID: 9911 Summary: Remove two invalid tests Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: blocker Priority: P5 - low Component: Test Suite Assignee: jcamins(a)cpbibliography.com Reporter: jcamins(a)cpbibliography.com Orders no longer have serialid or subscription fields. -- You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 9506] New: Values are false in the generated pdf for basketgroups
by bugzilla-daemon＠bugs.koha-community.org 23 Mar '13

23 Mar '13

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9506 Bug ID: 9506 Summary: Values are false in the generated pdf for basketgroups Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: jonathan.druart(a)biblibre.com Due to the multi VAT development (Bug 5335), values are not well calculated in the pdf generated by the basketgroup print action. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 17

[Bug 6209] New: Standardize on one javascript library for client-side form validation
by bugzilla-daemon＠bugs.koha-community.org 23 Mar '13

23 Mar '13

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6209 Bug #: 6209 Summary: Standardize on one javascript library for client-side form validation Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Platform: All OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: Staff Client AssignedTo: paul.poulain(a)biblibre.com ReportedBy: oleonard(a)myacpl.org QAContact: koha-bugs(a)lists.koha-community.org CC: gmcharlt(a)gmail.com We handle client-side validation in a piecemeal fashion. It would simplify things for the user and developers if we standardized on one JavaScript library for handling all client-side form validation. I propose we use this one: http://bassistance.de/jquery-plugins/jquery-plugin-validation/ Syntax is pretty simple: In the JavaScript: $(document).ready(function(){ $("#commentForm").validate(); }); In the markup: <form id="commentForm" method="get" action=""> <input id="cname" name="name" size="25" class="required" minlength="2" /> "class='required'" tells the script to validate that field as required. Other options include email, url, date, number, specific length, etc. -- Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA Contact for the bug.

1 29

[Bug 9900] New: Plugins should not be enabled by default
by bugzilla-daemon＠bugs.koha-community.org 23 Mar '13

23 Mar '13

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9900 Bug ID: 9900 Summary: Plugins should not be enabled by default Classification: Unclassified Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: blocker Priority: P5 - low Component: Tools Assignee: kyle.m.hall(a)gmail.com Reporter: jcamins(a)cpbibliography.com 09:16 < oleonard> "UseKohaPlugins" is enabled by default? 09:17 < jcamins> oleonard: shouldn't be. 09:22 < oleonard> jcamins: Plugins are enabled by default. Just tested with a blank db This is a problem. -- You are receiving this mail because: You are watching all bug changes.

1 9