June 2018 - Koha-bugs - lists.koha-community.org

[Bug 13618] Prevent XSS in the Staff Client and the OPAC
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '18

20 Jun '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #59984|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13618] Prevent XSS in the Staff Client and the OPAC
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '18

20 Jun '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #59983|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13618] Prevent XSS in the Staff Client and the OPAC
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '18

20 Jun '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- URL|https://github.com/joubu/Ko |https://gitlab.com/joubu/Ko |ha/tree/bug_13618 |ha/tree/bug_13618 Status|ASSIGNED |Needs Signoff --- Comment #217 from Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> --- Patches have been rebased, adjusted for master and push to https://gitlab.com/joubu/Koha/tree/bug_13618 They do not deal with performance issues but are ready to be tested (to catch missing .raw) -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 15771] New: CGI::escapeHTML should not be used anymore
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '18

20 Jun '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15771 Bug ID: 15771 Summary: CGI::escapeHTML should not be used anymore Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: ASSIGNED Severity: normal Priority: P5 - low Component: System Administration Assignee: jonathan.druart(a)bugs.koha-community.org Reporter: jonathan.druart(a)bugs.koha-community.org QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Depends on: 13618 In admin/auth_subfields_structure.pl, admin/marc_subfields_structure.pl and catalogue/image.pl, the pl script escapes html characters. Since bug 13618 has been pushed, this method should not be used anymore. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 [Bug 13618] Prevent XSS in the Staff Client and the OPAC -- You are receiving this mail because: You are watching all bug changes.

1 12

[Bug 20130] New: matching authorities the difference shows biblionumber
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '18

20 Jun '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20130 Bug ID: 20130 Summary: matching authorities the difference shows biblionumber Change sponsored?: --- Product: Koha Version: 16.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: koha-bugs(a)lists.koha-community.org Reporter: hagud(a)orex.es QA Contact: testopia(a)bugs.koha-community.org when updating authorities values using record matching, when you click on the diff links ... it shows the biblionumber instead of the authority.. and it is scaring ;) but it works fine! when loading and matching records koha diff link musst show authority record, not bibliographic vs authority uploaded record. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1

[Bug 15773] New: Checkboxes does not work correctly when creating a new subfield for an authority framework
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '18

20 Jun '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15773 Bug ID: 15773 Summary: Checkboxes does not work correctly when creating a new subfield for an authority framework Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: ASSIGNED Severity: normal Priority: P5 - low Component: System Administration Assignee: jonathan.druart(a)bugs.koha-community.org Reporter: jonathan.druart(a)bugs.koha-community.org QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Depends on: 15771 When creating a new subfield for an authority framework, the checkboxes don't behave as they should. If you click on the 'repeatable', 'mandatory' or 'is url' checkbox's label, the checkbox from the second tab will be checked/unchecked. This is caused by a non-unique id of the input element. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15771 [Bug 15771] CGI::escapeHTML should not be used anymore -- You are receiving this mail because: You are watching all bug changes.

1 26

[Bug 13618] Prevent XSS in the Staff Client and the OPAC
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '18

20 Jun '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 Jonathan Druart <jonathan.druart(a)bugs.koha-community.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks|15771 | See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=15771 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15771 [Bug 15771] CGI::escapeHTML should not be used anymore -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14919] Holds history for patrons
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '18

20 Jun '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14919 Josef Moravec <josef.moravec(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |20936 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20936 [Bug 20936] Holds History for patrons in OPAC -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14957] Write protecting MARC fields based on source of import
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '18

20 Jun '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14957 --- Comment #85 from David Gustafsson <glasklas(a)gmail.com> --- Created attachment 76210 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=76210&action=ed… Bug 14957 - Remove exports of removed subroutines Remove exports of subroutines previously removed -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14957] Write protecting MARC fields based on source of import
by bugzilla-daemon＠bugs.koha-community.org 20 Jun '18

20 Jun '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14957 David Gustafsson <glasklas(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|In Discussion |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.

1 0