June 2016 - Koha-bugs - lists.koha-community.org

[Bug 16599] XSS found in opac-shareshelf.pl
by bugzilla-daemon＠bugs.koha-community.org 21 Jun '16

21 Jun '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=16599 Chris Cormack <chris(a)bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Koha |OPAC Product|Koha security |Koha CC| |chris(a)bigballofwax.co.nz Status|Pushed to Master |Pushed to Stable Group|Koha security | --- Comment #14 from Chris Cormack <chris(a)bigballofwax.co.nz> --- Pushed to 3.20.x will be in 3.20.11 (Is in 3.22.7 already) -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 4460] Amazon's AssociateID tag not used in links so referred revenue lost
by bugzilla-daemon＠bugs.koha-community.org 21 Jun '16

21 Jun '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4460 M. Tompsett <mtompset(a)hotmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #10110|0 |1 is obsolete| | Attachment #10686|0 |1 is obsolete| | --- Comment #16 from M. Tompsett <mtompset(a)hotmail.com> --- Created attachment 52670 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=52670&action=ed… Bug 4460: Amazon's AssociateID tag not used in links so referred revenue lost Reworking based on output of: git grep "gp\/reader" Additionally, some changes might be in order though gp/reader works. https://affiliate-program.amazon.com/help/topic/t64/a1 suggests using dp A dp was discovered, so that part of the URL was left unchanged. The "/ref..." part was changed to "?tag={AAT}&ref..." TEST PLAN --------- 1) Added: "100 years of Canadian foreign policy / edited by Robert Bothwell and Jean Daudelin." 2) Added a second book with the word foreign in the title. 3) Waited for reindex 4) Checked out the Canadian foreign policy book. 5) Applied patch 6) Made sure that: - AmazonAssocTag was set to TEST (easy to notice) - AmazonCoverImages was set to 'Show' - OPACAmazonCoverImages was set to 'Show' 7) Searched intranet for 'foreign' to find the detail page -- hovering over picture shows URL with ?tag=TEST& in it. 8) Went to the OPAC Detail page 9) Toggling OPACURLOpenInNewWindow, confirmed that URL for the picture contained ?tag=TEST& in it. 10) Logged into the OPAC 11) Confirmed the URL in the checked out list on your summary page contained ?tag=TEST& in it. 12) Confirmed the URL in the checked out list on your reading history page contained ?tag=TEST& in it. 13) Confirmed links worked (went to expected page) 14) run koha qa test tools NOTE: Obsoleted old ones. -- You are receiving this mail because: You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 4460] Amazon's AssociateID tag not used in links so referred revenue lost
by bugzilla-daemon＠bugs.koha-community.org 21 Jun '16

21 Jun '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=4460 M. Tompsett <mtompset(a)hotmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Failed QA |Needs Signoff -- You are receiving this mail because: You are the QA Contact for the bug. You are watching all bug changes.

1 0

[Bug 11875] URL is poorly formed when searching on authid for author
by bugzilla-daemon＠bugs.koha-community.org 21 Jun '16

21 Jun '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11875 --- Comment #5 from Joy Nelson <joy(a)bywatersolutions.com> --- Agreed. Thanks for checking Owen! (In reply to Owen Leonard from comment #4) > This appears to be working correctly in master. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11875] URL is poorly formed when searching on authid for author
by bugzilla-daemon＠bugs.koha-community.org 21 Jun '16

21 Jun '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11875 Owen Leonard <oleonard(a)myacpl.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #4 from Owen Leonard <oleonard(a)myacpl.org> --- This appears to be working correctly in master. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13245] Send Cart via Email corrupts some Unicode characters
by bugzilla-daemon＠bugs.koha-community.org 21 Jun '16

21 Jun '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13245 --- Comment #6 from Owen Leonard <oleonard(a)myacpl.org> --- Is this bug still valid? I appears to be working correctly in master, but I'm not entirely sure I'm testing correctly. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 8437] Plack and database backup
by bugzilla-daemon＠bugs.koha-community.org 21 Jun '16

21 Jun '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8437 Nick Clemens <nick(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |nick(a)bywatersolutions.com Severity|major |critical --- Comment #13 from Nick Clemens <nick(a)bywatersolutions.com> --- Raising severity in hopes of getting more attention here, not quite a blocker, but quite painful. Large sites are now unable to use the export tool in many cases as it just times out eventually. Adding the page as an exception to plack seems to work sometimes but it would be nice to see a solution for this one. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11610] Serial summary page shows library code instead of description
by bugzilla-daemon＠bugs.koha-community.org 21 Jun '16

21 Jun '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11610 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #2 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Sorry, I meant "Serial collection" 1) Search for a subscription 2) Go to its detail page 3) Navigation on the left: serial collection https://staff.kopac.bsz-bw.de/cgi-bin/koha/serials/serials-collection.pl?su… ... and it appears to be fixed in the 3.22 I just tested this with. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14048] Change RefundLostItemFeeOnReturn to be branch specific
by bugzilla-daemon＠bugs.koha-community.org 21 Jun '16

21 Jun '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14048 Nick Clemens <nick(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #52658|0 |1 is obsolete| | --- Comment #49 from Nick Clemens <nick(a)bywatersolutions.com> --- Created attachment 52668 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=52668&action=ed… Bug 14048: (followup) Use the original holding branch This patch picks the item's holding branch *before* it gets fixed by using the checkin library instead. This way the RefundLostOnReturnControl syspref set to ItemHoldingBranch is respected (otherwise, as Nick explained this behaves just like if CheckinLibrary was set) Signed-off-by: Tomas Cohen Arazi <tomascohen(a)theke.io> Signed-off-by: Nick Clemens <nick(a)bywatersolutions.com> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14048] Change RefundLostItemFeeOnReturn to be branch specific
by bugzilla-daemon＠bugs.koha-community.org 21 Jun '16

21 Jun '16

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14048 Nick Clemens <nick(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #52482|0 |1 is obsolete| | --- Comment #48 from Nick Clemens <nick(a)bywatersolutions.com> --- Created attachment 52667 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=52667&action=ed… Bug 14048: (QA followup) Fix typo on syspref value Signed-off-by: Nick Clemens <nick(a)bywatersolutions.com> -- You are receiving this mail because: You are watching all bug changes.

1 0