February 2016 - Koha-bugs - lists.koha-community.org

[Bug 13618] Prevent XSS in the Staff Client and the OPAC
by bugzilla-daemon＠bugs.koha-community.org 08 Feb '16

08 Feb '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |15754 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15754 [Bug 15754] html tags displayed when editing frameworks -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13618] Prevent XSS in the Staff Client and the OPAC
by bugzilla-daemon＠bugs.koha-community.org 08 Feb '16

08 Feb '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |15734 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15734 [Bug 15734] Audio Alerts broken -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14757] Allow the use of Template Toolkit syntax for slips and notices
by bugzilla-daemon＠bugs.koha-community.org 08 Feb '16

08 Feb '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14757 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Signed Off |In Discussion --- Comment #15 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Switch to "In discussion' according to the ML thread. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 15126] REST API: Use newer version of Swagger2
by bugzilla-daemon＠bugs.koha-community.org 08 Feb '16

08 Feb '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15126 Julian Maurice <julian.maurice(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |13903 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13903 [Bug 13903] Add API routes to list, create, update, delete reserves -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13799] Add base for building RESTful API
by bugzilla-daemon＠bugs.koha-community.org 08 Feb '16

08 Feb '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13799 Julian Maurice <julian.maurice(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks|13903 | Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13903 [Bug 13903] Add API routes to list, create, update, delete reserves -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13903] Add API routes to list, create, update, delete reserves
by bugzilla-daemon＠bugs.koha-community.org 08 Feb '16

08 Feb '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13903 Julian Maurice <julian.maurice(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on|13799 |15126 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13799 [Bug 13799] Add base for building RESTful API https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15126 [Bug 15126] REST API: Use newer version of Swagger2 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14686] New menu option and permission for file uploading
by bugzilla-daemon＠bugs.koha-community.org 08 Feb '16

08 Feb '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14686 Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #1 from Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> --- Let's get this one moving.. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3144] anti-spam for opac-suggestions
by bugzilla-daemon＠bugs.koha-community.org 08 Feb '16

08 Feb '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3144 --- Comment #37 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- (In reply to David Cook from comment #35) > (In reply to Mason James from comment #34) > > hiya, are you running this follow-up patch? > > > > https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15035 > > Alas, I don't have access to see that security bug :/. Fixed :) -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3144] anti-spam for opac-suggestions
by bugzilla-daemon＠bugs.koha-community.org 08 Feb '16

08 Feb '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3144 --- Comment #36 from David Cook <dcook(a)prosentient.com.au> --- (In reply to Christopher Vella from comment #31) > Potentially the bot could be trying input forms at random, or more advanced > and only reading through the visible elements of the page. > Yeah, I think there are a few different things it could be. I'd love to know what data is being sent exactly. > Rather than go down the positive captcha route yet. We could attempt to make > this negcaptcha smarter. Totally agree. I'm absolutely on board for that. > One idea could be to IP ban any user who submits > content to that form (I don't see any reason why a normal user would). I'm not sure I understand what you mean here. When the user fills out the form, their browser would be POSTing the data to the Koha server, so it would be something a normal user would do. > We could also have the field name randomise per instance. Maybe. I'd be interested to see how other people are solving this problem out in the world. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 3144] anti-spam for opac-suggestions
by bugzilla-daemon＠bugs.koha-community.org 08 Feb '16

08 Feb '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3144 --- Comment #35 from David Cook <dcook(a)prosentient.com.au> --- (In reply to Mason James from comment #34) > hiya, are you running this follow-up patch? > > https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15035 Alas, I don't have access to see that security bug :/. -- You are receiving this mail because: You are watching all bug changes.

1 0