November 2018 - Koha-bugs - lists.koha-community.org

[Bug 19121] New: Prevent XSS in the Staff Client and the OPAC - bis
by bugzilla-daemon＠bugs.koha-community.org 27 Nov '19

27 Nov '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19121 Bug ID: 19121 Summary: Prevent XSS in the Staff Client and the OPAC - bis Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: ASSIGNED Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: jonathan.druart(a)bugs.koha-community.org Reporter: jonathan.druart(a)bugs.koha-community.org QA Contact: testopia(a)bugs.koha-community.org On bug 13618 we tried to escape variables at template level: all variables were escaped using Template::Stash::AutoEscaping::Escaped::HTML::escape It works well, but unfortunately it leads to performance issues (see bug 15715). Indeed in some scripts, 70k variables are displayed Another approach would be to escape variables when they are sent to the scripts. We will get only 1 call per variable passed to the script and we will not escape unnecessarily variables several times, or variables coming from the DB (maybe we will need a script to clean the data?) -- You are receiving this mail because: You are watching all bug changes.

1 15

[Bug 19016] New: Add a script to fix corrupted data
by bugzilla-daemon＠bugs.koha-community.org 27 Nov '19

27 Nov '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19016 Bug ID: 19016 Summary: Add a script to fix corrupted data Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Command-line Utilities Assignee: koha-bugs(a)lists.koha-community.org Reporter: jonathan.druart(a)bugs.koha-community.org QA Contact: testopia(a)bugs.koha-community.org CC: robin(a)catalyst.net.nz Depends on: 18966 We must provide a fix to deal with corrupted data. For more information, see bug 18966 and https://wiki.koha-community.org/wiki/DBMS_auto_increment_fix Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18966 [Bug 18966] Move of checkouts - Deal with duplicate IDs at DBMS level -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 28

[Bug 17851] New: Add elasticsearch config to koha-conf.xml
by bugzilla-daemon＠bugs.koha-community.org 26 Nov '19

26 Nov '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17851 Bug ID: 17851 Summary: Add elasticsearch config to koha-conf.xml Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Installation and upgrade (command-line installer) Assignee: gmcharlt(a)gmail.com Reporter: olli-antti.kivilahti(a)jns.fi QA Contact: testopia(a)bugs.koha-community.org Following the Elasticsearch installation instructions from: https://wiki.koha-community.org/wiki/Elasticsearch the <elasticsearch> config seems to be missing. This patch adds interactive Elasticsearch-questions to the Makefile.PL to configure ES. -- You are receiving this mail because: You are watching all bug changes.

1 25

[Bug 21526] New: TT variables used to build a link should be uri filtered
by bugzilla-daemon＠bugs.koha-community.org 26 Nov '19

26 Nov '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21526 Bug ID: 21526 Summary: TT variables used to build a link should be uri filtered Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: ASSIGNED Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: jonathan.druart(a)bugs.koha-community.org Reporter: jonathan.druart(a)bugs.koha-community.org QA Contact: testopia(a)bugs.koha-community.org Depends on: 13618 and not html filtered, see the wiki page for more details https://wiki.koha-community.org/wiki/Coding_Guidelines#HTML9:_filter_all_th… Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 [Bug 13618] Add additional template filter methods and a filter presence test to Koha -- You are receiving this mail because: You are watching all bug changes.

1 86

[Bug 18930] New: Move lost item refund rules to circulation_rules table
by bugzilla-daemon＠bugs.koha-community.org 26 Nov '19

26 Nov '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18930 Bug ID: 18930 Summary: Move lost item refund rules to circulation_rules table Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: kyle(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org This patch will move the list item refund rules from a dedicated table to the circulation_rules table. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 89

[Bug 21574] New: Local use system preferences page doesn't have the system preferences menu
by bugzilla-daemon＠bugs.koha-community.org 26 Nov '19

26 Nov '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21574 Bug ID: 21574 Summary: Local use system preferences page doesn't have the system preferences menu Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: System Administration Assignee: koha-bugs(a)lists.koha-community.org Reporter: caroline.cyr-la-rose(a)inlibro.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com When looking through system preferences, you have a menu of all the sysprefs categories on the left. However, if you click on "Local use", the left side menu is the administration menu. To reproduce: 1) Go to Administration > Global system preferences 2) Click on categories on the left-hand side of the screen (for example, "Circulation" or "Staff client", the left-hand side menu stays the same 3) Click on the "Local use" category 4) Notice the left-hand side menu is the administration menu and not the sysprefs categories -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 16

[Bug 21071] New: Search results not sorting in staff client advanced search when only AdvancedSearchTypes checkboxes are used
by bugzilla-daemon＠bugs.koha-community.org 24 Nov '19

24 Nov '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21071 Bug ID: 21071 Summary: Search results not sorting in staff client advanced search when only AdvancedSearchTypes checkboxes are used Change sponsored?: --- Product: Koha Version: 17.11 Hardware: All OS: All Status: NEW Severity: trivial Priority: P5 - low Component: Searching Assignee: koha-bugs(a)lists.koha-community.org Reporter: lucy.vaux-harvey(a)ptfs-europe.com QA Contact: testopia(a)bugs.koha-community.org Sorting of search results in the staff client advanced search does not work if you run a search using ONLY the Item types/Shelving locations/Collections checkbox limiters. Reported on 17.11.05. Tested and works correctly at 17.05. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 7

[Bug 20841] New: Barcode and description are needed in payment details
by bugzilla-daemon＠bugs.koha-community.org 24 Nov '19

24 Nov '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20841 Bug ID: 20841 Summary: Barcode and description are needed in payment details Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Fines and fees Assignee: koha-bugs(a)lists.koha-community.org Reporter: costalc(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Created attachment 75693 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=75693&action=ed… Barcode and description are needed in payment details Barcode and description are needed in payment details. See file attached. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 5

[Bug 15689] New: Label editor: Fix issues with wrong batch_id parameter
by bugzilla-daemon＠bugs.koha-community.org 21 Nov '19

21 Nov '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15689 Bug ID: 15689 Summary: Label editor: Fix issues with wrong batch_id parameter Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: Label/patron card printing Assignee: cnighswonger(a)foundations.edu Reporter: veron(a)veron.ch QA Contact: testopia(a)bugs.koha-community.org There are issues with the label editor, related to the batch_id: 1/ You can select all the items and click on "remove selected" without any warning 2/ You can delete the last item clicking on the "Delete" button ("actions" column) In these 2 cases, the batch_id parameter is passed but is wrong. If you add a new batch on the resulting screen, the batch_id of the deleted batch will be displayed, but a new one will be used. Copied from the comment by Jonathan Druart on Bug 15663 https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15663#c7 -- You are receiving this mail because: You are watching all bug changes.

1 2

[Bug 18765] New: Bad cardnumber causes 'Borrower' search to fail
by bugzilla-daemon＠bugs.koha-community.org 21 Nov '19

21 Nov '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18765 Bug ID: 18765 Summary: Bad cardnumber causes 'Borrower' search to fail Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Staff Client Assignee: koha-bugs(a)lists.koha-community.org Reporter: mtj(a)kohaaloha.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Created attachment 64122 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=64122&action=ed… pic to test bug.. 1/ add a leading TAB character to a borrower's cardnumber 2/ attempt to search for that user 3/ observe that no results are displayed (see pic) -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 4