June 2019 - Koha-bugs - lists.koha-community.org

[Bug 20514] New: Searching for a patron using the search field (street address) returns no results if inputting a address stored in multiple db fields
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '19

02 Jul '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20514 Bug ID: 20514 Summary: Searching for a patron using the search field (street address) returns no results if inputting a address stored in multiple db fields Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P4 Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: alexbuckley(a)catalyst.net.nz QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com If inputting a street address of street number and street name which are stored in different db fields (e.g. 'streetnumber' and 'address') this does not return patron results. If however the street number and name are stored in the same db field then results are returned for your search query. At present the only way to search with the search field of address is to either enter ONLY a streetnumber OR a street name unless they are both stored in the same db field. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 12

[Bug 22878] New: cannot add a patron card layout with mysql strict mode on
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '19

02 Jul '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22878 Bug ID: 22878 Summary: cannot add a patron card layout with mysql strict mode on Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Label/patron card printing Assignee: cnighswonger(a)foundations.edu Reporter: wizzyrea(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Target Milestone: --- Attempting to create a patron card layout with mysql strict mode on gives the following error: DBD::mysql::st execute failed: Incorrect integer value: '' for column 'layout_id' at row 1 [for Statement "INSERT INTO creator_layouts (creator, layout_id, units, layout_xml, layout_name) VALUES (?,?,?,?,?);" with ParamValues: 0='Patroncards', 1="", 2="POINT", 3="<opt guide_box="0" guide_grid="0" page_side="F" units="POINT"> </opt> ", 4="something"] at /kohadevbox/koha/C4/Creators/Layout.pm line 181. Database returned the following error: Incorrect integer value: '' for column 'layout_id' at row 1 at /kohadevbox/koha/C4/Creators/Layout.pm line 183. -- You are receiving this mail because: You are watching all bug changes.

1 15

[Bug 22886] New: Missing space between fields from Keyword to MARC mapping in catalouging search
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '19

02 Jul '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22886 Bug ID: 22886 Summary: Missing space between fields from Keyword to MARC mapping in catalouging search Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl Target Milestone: --- If you've added multiple subfields to the "subtitle" Keyword to MARC mapping they display without a space between them in the cataloguing search. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 11

[Bug 22475] New: Shelving location doesn't appear on tags list view
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '19

02 Jul '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22475 Bug ID: 22475 Summary: Shelving location doesn't appear on tags list view Change sponsored?: --- Product: Koha Version: master Hardware: All URL: /cgi-bin/koha/tags/list.pl?tag=foo OS: All Status: ASSIGNED Severity: minor Priority: P5 - low Component: Templates Assignee: oleonard(a)myacpl.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org Depends on: 22422 Target Milestone: --- In the staff client, when viewing a list of titles with a particular tag, shelving location is supposed to appear but doesn't. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22422 [Bug 22422] improve item location display with class "shelvingloc" -- You are receiving this mail because: You are watching all bug changes.

1 12

[Bug 20635] New: Write authentication tests with Test::Mojo
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '19

02 Jul '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20635 Bug ID: 20635 Summary: Write authentication tests with Test::Mojo Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: Test Suite Assignee: julian.maurice(a)biblibre.com Reporter: julian.maurice(a)biblibre.com QA Contact: testopia(a)bugs.koha-community.org Depends on: 20582 The authentication code needs to be rewritten. There were several attempts (bugs 7174, 18315) and other bugs without patch that talk about it (12547, 12548, 15204). Bug 13503 says that before rewriting one of the most sensible area of Koha, we need to write tests. Bug 19181 contain some tests, but they require Selenium, firefox, xfvb, java, and a running web server. With Mojolicious we can write equivalent tests without all those dependencies. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20582 [Bug 20582] Turn Koha into a Mojolicious application -- You are receiving this mail because: You are watching all bug changes.

1 9

[Bug 22624] New: Show OPAC description for authorised values in OPAC
by bugzilla-daemon＠bugs.koha-community.org 02 Jul '19

02 Jul '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22624 Bug ID: 22624 Summary: Show OPAC description for authorised values in OPAC Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org Target Milestone: --- Bug 22620 fixed an occurrence where the AuthorisedValues TT plugin was used without the 1 parameter for OPAC interface. There are some more to fix. -- You are receiving this mail because: You are watching all bug changes.

1 16

[Bug 16507] New: show play media tab first
by bugzilla-daemon＠bugs.koha-community.org 01 Jul '19

01 Jul '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=16507 Bug ID: 16507 Summary: show play media tab first Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: nengard(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Created attachment 51457 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=51457&action=ed… opac view It might be nice if there are no holdings and there is a play media tab to show that tab first. For example I'm cataloging streaming media so I don't need items, but the video can be viewed right in the OPAC so why not show that tab first? -- You are receiving this mail because: You are watching all bug changes.

1 21

[Bug 21005] New: Report wizards fatal errors if no radio buttons selected
by bugzilla-daemon＠bugs.koha-community.org 01 Jul '19

01 Jul '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21005 Bug ID: 21005 Summary: Report wizards fatal errors if no radio buttons selected Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: Reports Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org Some report wizards have radio buttons selected by default and some do not. If someone tries to run a report wizard that has no radio buttons selected, fatal errors are generated. This can be fixed just be pre-selecting radio buttons on those reports without them. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 16

[Bug 19817] New: Merge local and online documentations
by bugzilla-daemon＠bugs.koha-community.org 01 Jul '19

01 Jul '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=19817 Bug ID: 19817 Summary: Merge local and online documentations Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: ASSIGNED Severity: new feature Priority: P5 - low Component: Documentation Assignee: jonathan.druart(a)bugs.koha-community.org Reporter: jonathan.druart(a)bugs.koha-community.org QA Contact: testopia(a)bugs.koha-community.org We are currently maintaining a local (help/* files) and online (https://koha-community.org/manual) documentations. They must be merged to ease the maintainability and improve the relevance. The online manual has been improved greatly the last months and the obvious solution would be to point to it from the different Koha installations. Here is the different steps I have in mind: - Remove existing local documentation - Point to the relevant pages of the online documentation - Make the online documentation configurable to add the ability to point to a local copy (for offline access) - Re-add the ability to edit the manual It would make sense to have a koha-manual package depending on sphinx and copy the related .rst files (depending on the Koha version). Then a script will be provided (koha-build-manual) to regenerate the manual (after an update for instance) in different languages. For the local edition we could imagine to add add local commits when a change is made. Advanced users/administrators will then need to rebase and eventually fix the conflicts. -- You are receiving this mail because: You are watching all bug changes.

1 134

[Bug 23238] New: CSRF On Logout Page
by bugzilla-daemon＠bugs.koha-community.org 30 Jun '19

30 Jun '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23238 Bug ID: 23238 Summary: CSRF On Logout Page Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Web services Assignee: koha-bugs(a)lists.koha-community.org Reporter: anuragmewar(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Created attachment 91132 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=91132&action=ed… PFA the Google Drive link for the video Vulnerability: CSRF on logout page Vulnerability Description: Cross-Site Request Forgery (CSRF) is an attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated. With a little help of social engineering (such as sending a link via email or chat), an attacker may trick the users of a web application into executing actions of the attacker's choosing. Vulnerable URL: https://ils.ddn.upes.ac.in:8001/cgi-bin/koha/opac-main.pl CSRF POC: <html> <body> <script>history.pushState('', '', '/')</script> <form action="https://ils.ddn.upes.ac.in:8001/cgi-bin/koha/opac-main.pl"> <input type="hidden" name="logout.x" value="1" /> <input type="submit" value="Submit request" /> </form> </body> </html> Steps to reproduce: 1. Login with valid credentials 2. Start any proxy tool to intercept the request. 3. Click logout 4. Send to "repeator" 5. Change "referer" header 6. Observe the output 7. Create an HTML file using the CSRF POC mentioned above 8. Login again 9. Open the CSRF html file on a new tab 10. Submit request 11. Results would reflect on main account POC: PFA the video -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0