January 2016 - Koha-bugs - lists.koha-community.org

[Bug 13618] Prevent XSS in the Staff Client and the OPAC
by bugzilla-daemon＠bugs.koha-community.org 29 Jan '16

29 Jan '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #46795|0 |1 is obsolete| | --- Comment #172 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Created attachment 47425 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=47425&action=ed… Bug 13618: Use Template::Stash::AutoEscaping to use the html filter Test plan: 0/ sudo cpanm Template::Stash::AutoEscaping 1/ Verify don't reproduce the XSS issue described on bug 13609 and other xss related bugs. 2/ Try to find some encoding issues (detail page, search results, facets, etc.) Signed-off-by: Signed-off-by: Joonas Kylmälä <j.kylmala(a)gmail.com> Signed-off-by: Bernardo Gonzalez Kriegel <bgkriegel(a)gmail.com> Signed-off-by: Katrin Fischer <katrin.fischer.83(a)web.de> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 15358] merge.pl does not populate values to merge
by bugzilla-daemon＠bugs.koha-community.org 29 Jan '16

29 Jan '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15358 --- Comment #30 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Yes, it works. The plan was to test with the same records on 3.20 and master + this patch set -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 15562] Make Koha more suitable for shared hosting with plack
by bugzilla-daemon＠bugs.koha-community.org 29 Jan '16

29 Jan '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15562 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jonathan.druart(a)bugs.koha-c | |ommunity.org, | |tomascohen(a)gmail.com --- Comment #5 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Hi Srdjan, How can we test this patch, could you provide a test plan? Is this patch already in [pre-]production somewhere? -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13937] Add a Z39.50 daemon that can inject item status MARC subfields
by bugzilla-daemon＠bugs.koha-community.org 29 Jan '16

29 Jan '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13937 Jacek Ablewicz <abl(a)biblos.pk.edu.pl> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |abl(a)biblos.pk.edu.pl -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11081] Port Koha::Contrib::Tamil indexer into Koha code base
by bugzilla-daemon＠bugs.koha-community.org 29 Jan '16

29 Jan '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11081 --- Comment #21 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Time::Progress and String::RewritePrefix are listed in the deps, but don't look to be used from this patch. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11190] sitemap.pl -- Generate a catalog sitemap
by bugzilla-daemon＠bugs.koha-community.org 29 Jan '16

29 Jan '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11190 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=11081 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11081] Port Koha::Contrib::Tamil indexer into Koha code base
by bugzilla-daemon＠bugs.koha-community.org 29 Jan '16

29 Jan '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11081 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=11190 CC| |jonathan.druart(a)bugs.koha-c | |ommunity.org --- Comment #20 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- After the discussion on bug 11190, I thought we all agreed that Moo must be used, instead of Moose. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 15516] RFC: Allow to reserve first available item from a group of titles
by bugzilla-daemon＠bugs.koha-community.org 29 Jan '16

29 Jan '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15516 --- Comment #3 from Julian Maurice <julian.maurice(a)biblibre.com> --- (In reply to Jonathan Druart from comment #2) > Maybe you could add a foreign key to borrowers.borrowernumber to list the > reserve group of a given patron. The link to the borrowers table is already there in reserves table, and this makes me think the schema is inconsistent because it allows grouping reserves for different borrowers. Maybe reserves.borrowernumber should be moved to reserve_group (and all reserves should belong to a group, even if the group only contains one reserve). What do you think ? > > - I don't know how to indicates in the interface that two or more > > reserves are only one request in reality. > > What do you plan to implement next? > If the reserve groups were named, and linked to a patron, you could display > these infos. Next steps would be to change the interface to reflect that change everywhere we display holds. And implement that in OPAC too. In the tables that show all holds of a patron I can group visually the holds of the same "reserve_group", but I can't do that on tables that show only a title's holds for instance. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14509] Don't allow spaces at the end, beginning or as your password
by bugzilla-daemon＠bugs.koha-community.org 29 Jan '16

29 Jan '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14509 Marc Véron <veron(a)veron.ch> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=15702 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 10177] Koha Accepts Seven "Space" Characters as a Valid Password
by bugzilla-daemon＠bugs.koha-community.org 29 Jan '16

29 Jan '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10177 Marc Véron <veron(a)veron.ch> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=15702 -- You are receiving this mail because: You are watching all bug changes.

1 0