September 2018 - Koha-bugs - lists.koha-community.org

[Bug 13618] Add additional filter methods and a filter presence test to reduce the likelihood of new XSS vulnerabilities being introduced going forward.
by bugzilla-daemon＠bugs.koha-community.org 28 Sep '18

28 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 Martin Renvoize <martin.renvoize(a)ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Prevent XSS in the Staff |Add additional filter |Client and the OPAC |methods and a filter | |presence test to reduce the | |likelihood of new XSS | |vulnerabilities being | |introduced going forward. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13618] Prevent XSS in the Staff Client and the OPAC
by bugzilla-daemon＠bugs.koha-community.org 28 Sep '18

28 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 --- Comment #257 from Nick Clemens <nick(a)bywatersolutions.com> --- *** Bug 20870 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13618] Prevent XSS in the Staff Client and the OPAC
by bugzilla-daemon＠bugs.koha-community.org 28 Sep '18

28 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 --- Comment #256 from Nick Clemens <nick(a)bywatersolutions.com> --- *** Bug 20869 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13618] Prevent XSS in the Staff Client and the OPAC
by bugzilla-daemon＠bugs.koha-community.org 28 Sep '18

28 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 --- Comment #255 from Nick Clemens <nick(a)bywatersolutions.com> --- *** Bug 20871 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13618] Prevent XSS in the Staff Client and the OPAC
by bugzilla-daemon＠bugs.koha-community.org 28 Sep '18

28 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 --- Comment #254 from Nick Clemens <nick(a)bywatersolutions.com> --- *** Bug 20872 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13618] Prevent XSS in the Staff Client and the OPAC
by bugzilla-daemon＠bugs.koha-community.org 28 Sep '18

28 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 --- Comment #253 from Nick Clemens <nick(a)bywatersolutions.com> --- *** Bug 20873 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13618] Prevent XSS in the Staff Client and the OPAC
by bugzilla-daemon＠bugs.koha-community.org 28 Sep '18

28 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13618 Nick Clemens <nick(a)bywatersolutions.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |amitddng135(a)gmail.com --- Comment #252 from Nick Clemens <nick(a)bywatersolutions.com> --- *** Bug 20874 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14786] Use text "MARC file" instead of "ISO2709" everywhere
by bugzilla-daemon＠bugs.koha-community.org 28 Sep '18

28 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14786 Owen Leonard <oleonard(a)myacpl.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs Signoff |Failed QA --- Comment #4 from Owen Leonard <oleonard(a)myacpl.org> --- This looks good but there are a couple of QA script warnings that need to be addressed. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 11373] Add a "cash register" feature to the fine payment form
by bugzilla-daemon＠bugs.koha-community.org 28 Sep '18

28 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11373 Blou <philippe.blouin(a)inlibro.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Signed Off |Failed QA --- Comment #60 from Blou <philippe.blouin(a)inlibro.com> --- This should be further simplified. - if preference is set, UI should send to backend the exact amount, since we presume the change has been given back. - no need to overwrite the error_over behavior. It will be necessary when the pref is not set. - in fact, the modification to members/paycollect.pl are not necessary, imo. - if preference is set, make the change comment very obvious (color message?) - The patch should focus on the functionality. Do not rewrite all the format() to $Price if not related to the feature. This should be a separate patch. To consider: making the submit button have a confirm popup when change is to be given back. Not need to go to the backend for that. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 8446] Shibboleth authentication
by bugzilla-daemon＠bugs.koha-community.org 28 Sep '18

28 Sep '18

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8446 Martin Renvoize <martin.renvoize(a)ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |20266 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20266 [Bug 20266] Authentication using Shibboleth - bootstrap -- You are receiving this mail because: You are watching all bug changes.

1 0