September 2017 - Koha-bugs - lists.koha-community.org

[Bug 19110] XSS Stored in branches.pl
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '17

07 Sep '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19110 --- Comment #6 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- This patch has been pushed to 16.11.x and is in 16.11.11. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 19112] Stored XSS in basketheader.pl
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '17

07 Sep '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19112 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |katrin.fischer(a)bsz-bw.de --- Comment #6 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- This patch has been pushed to 16.11.x and is in 16.11.11. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 19114] Stored XSS in parcels.pl
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '17

07 Sep '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19114 --- Comment #7 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- This patch has been pushed to 16.11.x and is in 16.11.11. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 19035] Stored XSS in patron lists - lists.pl
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '17

07 Sep '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19035 --- Comment #6 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- This patch has been pushed to 16.11.x and is in 16.11.11. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 12691] Use Koha.Preference for calls to SCOUserJS, SCOUserCSS, OPACUserCSS, opacuserjs, etc in Self-Checkout
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '17

07 Sep '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12691 --- Comment #26 from Aleisha Amohia <aleisha(a)catalyst.net.nz> --- Created attachment 66906 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=66906&action=ed… Bug 12691: [FOLLOW-UP] Fixing some logic -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 12691] Use Koha.Preference for calls to SCOUserJS, SCOUserCSS, OPACUserCSS, opacuserjs, etc in Self-Checkout
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '17

07 Sep '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12691 Aleisha Amohia <aleisha(a)catalyst.net.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|In Discussion |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 12691] Use Koha.Preference for calls to SCOUserJS, SCOUserCSS, OPACUserCSS, opacuserjs, etc in Self-Checkout
by bugzilla-daemon＠bugs.koha-community.org 07 Sep '17

07 Sep '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12691 --- Comment #25 from Aleisha Amohia <aleisha(a)catalyst.net.nz> --- (In reply to Jonathan Druart from comment #24) > What are we doing here? > > If it is just replacing syspref fetch with Koha.Preference, the following is > wrong: > > - [% IF ( display_patron_image ) %] > + [% IF ( > Koha.Preference('ShowPatronImageInWebBasedSelfCheck') ) %] > > display_patron_image is set when $borrower is set AND the pref is set. > We had too many regressions in this area, I will not take any risks. > > If we are doing something else, it is not written in the commit messages. > > Please clarify. Oh I see what you mean, I think I've made the logic a little too confusing. I'll take out the [% IF ( Koha.Preference('ShowPatronImageInWebBasedSelfCheck') ) %] line in the template and leave the logic for that as it was. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 10486] Allow external Z39.50 targets to be searched from the OPAC
by bugzilla-daemon＠bugs.koha-community.org 06 Sep '17

06 Sep '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=10486 Jason Palmer <jpalmer(a)switchinc.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jpalmer(a)switchinc.org -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 15351] RDA fields in Authority Frameworks
by bugzilla-daemon＠bugs.koha-community.org 06 Sep '17

06 Sep '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15351 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|REOPENED |RESOLVED --- Comment #7 from Katrin Fischer <katrin.fischer(a)bsz-bw.de> --- Thx Joy! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 9810] Search limit 'available' does not hide damaged, withdrawn, or not-for-loan items
by bugzilla-daemon＠bugs.koha-community.org 06 Sep '17

06 Sep '17

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9810 Patrick Robitaille <patrick.robitaille(a)ccsr.qc.ca> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |patrick.robitaille(a)ccsr.qc. | |ca -- You are receiving this mail because: You are watching all bug changes.

1 0