August 2017 - Koha-bugs - lists.koha-community.org

[Bug 18854] DoS Offset
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

1 0

[Bug 18124] CSRF tokens must be limited to user's session
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

1 0

[Bug 17900] Possible SQL injection in patroncards template editing
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

1 0

[Bug 18349] Possibility to checkout/ renew bypassing the circ rules using SCO
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

1 0

[Bug 18010] Remove potential exposure from gettemplate
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

1 0

[Bug 18019] Add CSRF protection to authorities-home.pl (op==delete)
by bugzilla-daemon＠bugs.koha-community.org 08 Aug '17

08 Aug '17

1 0

[Bug 10306] Allow multiple Koha to Marc mappings ( say publication info in MARC21 260 or RDA 264)
by bugzilla-daemon＠bugs.koha-community.org 07 Aug '17

07 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10306 Christopher Davis <tubaclarinet(a)protonmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |tubaclarinet(a)protonmail.com -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 10407] Allow MARCXML records to be imported with Tools/ Stage MARC records for import
by bugzilla-daemon＠bugs.koha-community.org 07 Aug '17

07 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10407 --- Comment #58 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Hi Marcel, I am sorry, I didn't mean to upset you. I think you are right - this should have been documented in the code base as I think I was the only one to remember the related bug report when seeing this, which explains the comments on the bug report so far. Thx for filing the new bug and trying to undo the regression! I think maybe we could add a page in the wiki about existing plugin hooks, what do you think? There is https://wiki.koha-community.org/wiki/Koha_plugins, but it doesn't mention neither import nor EDIFACT plugins. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11577] Automatic renewals
by bugzilla-daemon＠bugs.koha-community.org 07 Aug '17

07 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11577 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |19053 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19053 [Bug 19053] Auto renewal flag is not kept if a confirmation if needed -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 10407] Allow MARCXML records to be imported with Tools/ Stage MARC records for import
by bugzilla-daemon＠bugs.koha-community.org 07 Aug '17

07 Aug '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10407 --- Comment #57 from Pete Edwards <koha(a)jsense.co.uk> --- I agree with you Marcel, that plugins themselves are not part of the codebase but I think we also agree that the plugin system is. I had forgotten that it was that 3.20 note regarding issue 12412 that had led me to develop the plugin the way I had. I even commented on the issue when I was working it. When I reviewed the code changes this week, I concluded I had been lucky - there is nothing obvious in the code to allow arbitrary file types - the reading routine just allowed a non-MARC record file to drop through to the plugin in a less that obvious way so I can see why you didn't maintain that in this latest update. It highlights the need to have clear in-code documentation that would have explained the intent of the original author. I agree with your suggestion about adding an "Arbitrary" format but that will probably take some time to get through development so for now, I'll move my code to a different plugin that will simply convert to a Marc file and allow my users to download that and then stage it without using any plugin. -- You are receiving this mail because: You are watching all bug changes.

1 0