February 2022 - Koha-bugs - lists.koha-community.org

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 22 Feb '22

22 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 wainuiwitikapark(a)catalyst.net.nz changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #130935|0 |1 is obsolete| | --- Comment #57 from wainuiwitikapark(a)catalyst.net.nz --- Created attachment 131003 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=131003&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: guarantor_search.tt To test, edit a patron record and go through the process of adding a guarantor. In the guarantor search results table the address should be displayed correctly. Signed-off-by: Wainui Witika-Park <wainuiwitikapark(a)catalyst.net.nz> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 22 Feb '22

22 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 wainuiwitikapark(a)catalyst.net.nz changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #130934|0 |1 is obsolete| | --- Comment #56 from wainuiwitikapark(a)catalyst.net.nz --- Created attachment 131002 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=131002&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: catalogue/results.tt To test, perform a search in the catalogue and verify that search term highlighting works correctly. Signed-off-by: Wainui Witika-Park <wainuiwitikapark(a)catalyst.net.nz> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 22 Feb '22

22 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 wainuiwitikapark(a)catalyst.net.nz changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #130933|0 |1 is obsolete| | --- Comment #55 from wainuiwitikapark(a)catalyst.net.nz --- Created attachment 131001 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=131001&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: authorities/blinddetail-biblio-search.tt Test the process of searching for and selecting an authority record for use in the basic MARC editor. Signed-off-by: Wainui Witika-Park <wainuiwitikapark(a)catalyst.net.nz> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 22 Feb '22

22 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 wainuiwitikapark(a)catalyst.net.nz changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #130932|0 |1 is obsolete| | --- Comment #54 from wainuiwitikapark(a)catalyst.net.nz --- Created attachment 131000 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=131000&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: authorities/authorities.tt Check that mandatory tags and subfields are correctly required when editing an authority record. Signed-off-by: Wainui Witika-Park <wainuiwitikapark(a)catalyst.net.nz> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 22 Feb '22

22 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 wainuiwitikapark(a)catalyst.net.nz changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #130931|0 |1 is obsolete| | --- Comment #53 from wainuiwitikapark(a)catalyst.net.nz --- Created attachment 130999 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=130999&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: admin/preferences.tt Test that preference search term highlighting works correctly. Signed-off-by: Wainui Witika-Park <wainuiwitikapark(a)catalyst.net.nz> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 30051] New: Changing AcqCreateItems value impacts baskets set to follow default behavior
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30051 Bug ID: 30051 Summary: Changing AcqCreateItems value impacts baskets set to follow default behavior Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: andrew(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org When creating a basket in acquisitions, we record the user's choice for item creation in aqbasket.create_items. However, if one sets the basket to follow the default behavior determined in the AcqCreateItems syspref then we leave aqbasket.create_items NULL. This can create issues if the syspref gets changed. For example: - set AcqCreateItems to "placing an order" - create a basket, leaving item creation set to the default - confirm aqbasket.create_items is null - add an order to your basket from a new bib. confirm your bib and 1 item are created. - close your basket - set AcqCreateItems to "receiving an order" - receive your order - confirm receiving the order creates a second item -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1

[Bug 28724] New: AllowAllMessageDeletion "Don't allow" not working on moremember.pl
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28724 Bug ID: 28724 Summary: AllowAllMessageDeletion "Don't allow" not working on moremember.pl Change sponsored?: --- Product: Koha Version: 20.05 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: george(a)nekls.org QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com I can delete messages from other libraries on moremember.pl even when AllowAllMessageDeletion is set to "Don't allow" -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 5

[Bug 29903] Message deletion possible from different branch
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29903 George Williams (NEKLS) <george(a)nekls.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |george(a)nekls.org --- Comment #13 from George Williams (NEKLS) <george(a)nekls.org> --- *** Bug 28724 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 30146] New: Add test for missing SCSS compilation
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30146 Bug ID: 30146 Summary: Add test for missing SCSS compilation Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Test Suite Assignee: chris(a)bigballofwax.co.nz Reporter: victor(a)tuxayo.net QA Contact: testopia(a)bugs.koha-community.org This is a request for a test that checks that it hasn't been missed by RMaints or the RM. Not enough RMaints use the pre-push git hook (see link bellow) that does the check locally before pushing. I have found 2 or 3 times uncompiled SCSS (thanks to the hook!) when I started working on a new (old) branch that in the previous cycle, had compilation forgotten. Is that feasible to have tests that use git? It could work like the prepush hook for "Check for missing CSS Compiles" section: https://wiki.koha-community.org/wiki/Tips_and_tricks#pre-push -- You are receiving this mail because: You are watching all bug changes.

1 1

[Bug 30145] New: Add test for DBIx schema files matching kohastructure.sql
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30145 Bug ID: 30145 Summary: Add test for DBIx schema files matching kohastructure.sql Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Test Suite Assignee: chris(a)bigballofwax.co.nz Reporter: victor(a)tuxayo.net QA Contact: testopia(a)bugs.koha-community.org This is a request for a test that checks that updating the schema files hasn't been missed by RMaints or the RM. It has just been found to have happened on 20.11.x and 19.11.x. As for 20.11.x I have no idea from old long it is. Because I haven't backported structure changes this cycle. Is that feasible to have tests that use git? It could work like the prepush hook for "Check for missing CSS Compiles" section: https://wiki.koha-community.org/wiki/Tips_and_tricks#pre-push -- You are receiving this mail because: You are watching all bug changes.

1 1