February 2022 - Koha-bugs - lists.koha-community.org

[Bug 24201] New: Attach desk to intranet session
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24201 Bug ID: 24201 Summary: Attach desk to intranet session Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: nicolas.legrand(a)bulac.fr QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com, severine.queune(a)bulac.fr Depends on: 13881 Blocks: 14654 Last step before attaching a waiting hold to a desk: attach the current desk to the librarians session. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13881 [Bug 13881] Add desk management https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14654 [Bug 14654] Add desk filter in Holds awaiting pickup list -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 131

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 --- Comment #52 from Jonathan Druart <jonathan.druart+koha(a)gmail.com> --- Patches adjusted for 19.11. The following patch is not relevant for this branch: Bug 26102: Prevent XSS when To.json is used: subscription-add.tt -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 --- Comment #51 from Jonathan Druart <jonathan.druart+koha(a)gmail.com> --- Created attachment 130936 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=130936&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: unimarc_field_4XX.tt To test, edit a MARC framework to link a subfield to the unimarc_field_4XX.tt. The process of triggering the plugin and selecting a search result from the plugin popup should work correctly. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 --- Comment #50 from Jonathan Druart <jonathan.druart+koha(a)gmail.com> --- Created attachment 130935 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=130935&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: guarantor_search.tt To test, edit a patron record and go through the process of adding a guarantor. In the guarantor search results table the address should be displayed correctly. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 --- Comment #49 from Jonathan Druart <jonathan.druart+koha(a)gmail.com> --- Created attachment 130934 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=130934&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: catalogue/results.tt To test, perform a search in the catalogue and verify that search term highlighting works correctly. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 --- Comment #48 from Jonathan Druart <jonathan.druart+koha(a)gmail.com> --- Created attachment 130933 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=130933&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: authorities/blinddetail-biblio-search.tt Test the process of searching for and selecting an authority record for use in the basic MARC editor. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 --- Comment #47 from Jonathan Druart <jonathan.druart+koha(a)gmail.com> --- Created attachment 130932 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=130932&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: authorities/authorities.tt Check that mandatory tags and subfields are correctly required when editing an authority record. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 --- Comment #46 from Jonathan Druart <jonathan.druart+koha(a)gmail.com> --- Created attachment 130931 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=130931&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: admin/preferences.tt Test that preference search term highlighting works correctly. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 Jonathan Druart <jonathan.druart+koha(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |30044 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30044 [Bug 30044] Z39.50/SRU search button broken by update to 19.11.25 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 29840] New: opac-reserve explodes if invalid biblionumber is passed
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29840 Bug ID: 29840 Summary: opac-reserve explodes if invalid biblionumber is passed Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: ASSIGNED Severity: normal Priority: P5 - low Component: OPAC Assignee: jonathan.druart+koha(a)gmail.com Reporter: jonathan.druart+koha(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org An error message should be displayed instead. Can't call method "holds" on an undefined value at /kohadevbox/koha/opac/opac-reserve.pl line 172 -- You are receiving this mail because: You are watching all bug changes.

1 13