August 2017 - Koha-bugs - lists.koha-community.org

[Bug 16069] New: XSS issue in basket.pl page
by bugzilla-daemon＠bugs.koha-community.org 28 Nov '17

28 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=16069 Bug ID: 16069 Summary: XSS issue in basket.pl page Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Staff Client Assignee: koha-bugs(a)lists.koha-community.org Reporter: amitddng135(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com XSS issue in basket.pl page -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 6

[Bug 19034] New: XSS Flaws in- Cities - Z39.50/ SRU servers administration - Patron categories pages
by bugzilla-daemon＠bugs.koha-community.org 28 Nov '17

28 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19034 Bug ID: 19034 Summary: XSS Flaws in- Cities - Z39.50/SRU servers administration - Patron categories pages Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: System Administration Assignee: koha-bugs(a)lists.koha-community.org Reporter: amitddng135(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com XSS Flaws in- Cities - Z39.50/SRU servers administration - Patron categories pages -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 10

[Bug 18629] New: Web installer 17.05 not properly translatable
by bugzilla-daemon＠bugs.koha-community.org 28 Nov '17

28 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18629 Bug ID: 18629 Summary: Web installer 17.05 not properly translatable Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Installation and upgrade (web-based installer) Assignee: koha-bugs(a)lists.koha-community.org Reporter: veron(a)veron.ch QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Web installer displays a mix between translated languages and English. That is ugly, because installing is the first contact with Koha. Tested with 17.05 de-DE and it-IT (both 100% translated) (Note: Results below are the similar for both it-IT and de-DE, same parts not translated) To test: Download po files from http://translate.koha-community.org/de/17.05/ or http://translate.koha-community.org/it/17.05/ Install the languages cd misc/translator perl translate -v install it-IT or perl translate -v install de-DE Drop database Create database Restart memcached and plack Go to staff client (calls web installer), enter database user and pw Select one of the languages de-DE or it-IT, Continue to the next step Result: ------------ Web installer › Check Perl dependencies Alle erforderlichen Perl-Module sind installiert. Alle erforderlichen Abhängigkeiten sind installiert. Continue to the next step ------------ Continue... Result: ------------ Web installer › Database settings Datenbankeinstellungen: Database type : mysql Database name : koha_kohadev Database host : localhost Database port : 3306 (probably okay if blank) Database user : koha_kohadev Continue to the next step ------------- Continue... Result: Similar as above Continue: Result: ------------- Web installer › Set up database Jetzt sind wir soweit, dass die Datenbanktabellen angelegt und mit Beispieldaten gefüllt werden können. Continue to the next step ------------- Continue... (Result similar) Continue... (Result similar) Continue... Result (this time title translated, but not the text): ----------- MARC-Format auswählen MARC stands for Machine Readable Cataloging. A MARC record contains bibliographic information about an item. MARC21 is used globally, whereas UNIMARC tends to be used in Europe. Marc21 Continue to the next step ------------ Continue... Result: ----------- Web installer › Selecting default settings MARC-Frameworks: MARC21 Mandatory Select none (but toggles to 'Alle auswählen' (...) Text at the end in English: 'When you've made aour selections.... Import Result: ------------ (...) Optional Daten hinzugefügt (first word English) Mandatory Daten hinzugefügt (same) At the end: Basic installation complete. In the next steps you will be guided through some basic requirements like defining Koha user with all administrative privileges (superlibrarian). Sie können die Koha Community unterstützen, indem Sie Ihre Nutzungsdaten teilen. If you wish to share some of your data, please enable the functionality in the "Share your usage statistics" section of the Administration module. Set up some of Koha's basic requirements ------------ Then: ------------ Web installer › Installation complete Gratulation, die Installation ist abgeschlossen If this page does not redirect in 10 seconds, start onboarding process. ------------ Then in forms: Only field labels are translated, but not h3 tiltes and text For the first time, button is translated ('Bestätigen') Then: Web installer › Create a new circulation rule Administrator account created! Form fields translated Then finally: ----------- Web installer › Complete Ausleihregel erstellt! Congratulations you have finished and are ready to use Koha Koha nun benutzen ----------- More findings: - Some of the strings are not picked for translation (are not in the po files) - Some of the strings are in the po files, but seem not to be applied while installing -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 41

[Bug 18955] New: autocomplete is on in OPAC password recovery
by bugzilla-daemon＠bugs.koha-community.org 28 Nov '17

28 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18955 Bug ID: 18955 Summary: autocomplete is on in OPAC password recovery Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: fridolin.somers(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org In OPAC password recovery form autocomplete is not disabled. So when login or email is entered, it is saved in browser input history for autocomplete. This is a major issue for OPAC on computers with public access. -- You are receiving this mail because: You are watching all bug changes.

1 12

[Bug 19022] New: inventory location and author display
by bugzilla-daemon＠bugs.koha-community.org 28 Nov '17

28 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19022 Bug ID: 19022 Summary: inventory location and author display Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: koha-bugs(a)lists.koha-community.org Reporter: fridolin.somers(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org In inventory result page : Location is displayed after branch without any difference. Author is displayed into a paragraph making row hight. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 13

[Bug 18917] New: use font awesome buttons in CSV profiles
by bugzilla-daemon＠bugs.koha-community.org 28 Nov '17

28 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18917 Bug ID: 18917 Summary: use font awesome buttons in CSV profiles Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: koha-bugs(a)lists.koha-community.org Reporter: aleisha(a)catalyst.net.nz QA Contact: testopia(a)bugs.koha-community.org -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 12

[Bug 18857] New: Have "actions" at both ends of the circulation rules table
by bugzilla-daemon＠bugs.koha-community.org 28 Nov '17

28 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18857 Bug ID: 18857 Summary: Have "actions" at both ends of the circulation rules table Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Staff Client Assignee: koha-bugs(a)lists.koha-community.org Reporter: liz(a)catalyst.net.nz QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com System with lots of circulation rules face an unreasonable level of frustration when wanting to edit a rule they have already defined. Usually, a staff user will know which rule they want to edit without scrolling to the end of the table, and they often lose track of which row they are looking for before clicking edit (or delete). We should provide them buttons that they don't have to scroll to see. My reason for suggesting this is based on observations of librarians trying to work quickly with the rules. The short story is: they can't, because of the frustrating scrolling. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 17

[Bug 18104] New: allow SIP2 field AE (personal name ) to be customized
by bugzilla-daemon＠bugs.koha-community.org 28 Nov '17

28 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18104 Bug ID: 18104 Summary: allow SIP2 field AE (personal name ) to be customized Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: SIP2 Assignee: koha-bugs(a)lists.koha-community.org Reporter: kyle(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: colin.campbell(a)ptfs-europe.com Koha's SIP2 server sends the patron's name in the format "Firstname Surname" which is not very good for machine reading. We need to allow the format of the patron name to be customized in a manner similar to what is done with the DA field on bug 16755. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 18

[Bug 16755] New: allow SIP2 field DA ( hold patron name ) to be customized
by bugzilla-daemon＠bugs.koha-community.org 28 Nov '17

28 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=16755 Bug ID: 16755 Summary: allow SIP2 field DA ( hold patron name ) to be customized Change sponsored?: Sponsored Product: Koha Version: master Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: SIP2 Assignee: kyle(a)bywatersolutions.com Reporter: nengard(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: colin.campbell(a)ptfs-europe.com, nicole(a)bywatersolutions.com Goal of Development: To allow SIP2 field DA ( hold patron name ) to be customized. Work to be done: 1) Add new parameter da_field_template to SIPConfig.xml 2) Modify C4::SIP::Sip::MsgType::handle_checkin to pass the value of da_field_template to C4::SIP::ILS::Item::hold_patron_name 3) Modify C4::SIP::ILS::Item::hold_patron_name to process the template and output as the patron name if a template is specified -- You are receiving this mail because: You are watching all bug changes.

1 18

[Bug 18949] New: OPAC MARC details holdings table is not styled with < thead>
by bugzilla-daemon＠bugs.koha-community.org 28 Nov '17

28 Nov '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18949 Bug ID: 18949 Summary: OPAC MARC details holdings table is not styled with <thead> Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: aleisha(a)catalyst.net.nz QA Contact: testopia(a)bugs.koha-community.org The MARC details holdings table in the OPAC does not have <thead> around the header row, which means it doesn't get styled the same way as the other tables in the OPAC. This is more noticeable when you adding custom styles and themes to OPAC tables, where they don't get applied to this table. -- You are receiving this mail because: You are watching all bug changes.

1 10