April 2024 - Koha-bugs - lists.koha-community.org

[Bug 36308] New: SIP2 login broken by CSRF changes
by bugzilla-daemon＠bugs.koha-community.org 17 Apr '24

17 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36308 Bug ID: 36308 Summary: SIP2 login broken by CSRF changes Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: critical Priority: P5 - low Component: SIP2 Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org bug 36102 changed the login parameters from 'userid'/'password' to 'login_userid'/'login_password' SIP authentication was missed in the update -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 13

[Bug 36084] Pass CSRF token to SVC scripts (1/2)
by bugzilla-daemon＠bugs.koha-community.org 17 Apr '24

17 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36084 Bug 36084 depends on bug 36102, which changed state. Bug 36102 Summary: Protect login forms from CSRF attacks https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36102 What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to master |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36102] Protect login forms from CSRF attacks
by bugzilla-daemon＠bugs.koha-community.org 17 Apr '24

17 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36102 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|Pushed to master |RESOLVED --- Comment #41 from Fridolin Somers <fridolin.somers(a)biblibre.com> --- Depends on Bug 34478 not in 23.11.x -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36245] New: ILL - Custom backend form action is broken
by bugzilla-daemon＠bugs.koha-community.org 17 Apr '24

17 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36245 Bug ID: 36245 Summary: ILL - Custom backend form action is broken Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: ILL Assignee: pedro.amorim(a)ptfs-europe.com Reporter: pedro.amorim(a)ptfs-europe.com CC: pedro.amorim(a)ptfs-europe.com Depends on: 34478 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 [Bug 34478] Full CSRF protection -- You are receiving this mail because: You are watching all bug changes.

1 17

[Bug 36249] New: ILL - "Request from partners" action is broken
by bugzilla-daemon＠bugs.koha-community.org 17 Apr '24

17 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36249 Bug ID: 36249 Summary: ILL - "Request from partners" action is broken Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: ILL Assignee: pedro.amorim(a)ptfs-europe.com Reporter: pedro.amorim(a)ptfs-europe.com CC: david(a)davidnind.com, martin.renvoize(a)ptfs-europe.com, pedro.amorim(a)ptfs-europe.com, tomascohen(a)gmail.com, victor(a)tuxayo.net Depends on: 34478 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 [Bug 34478] Full CSRF protection -- You are receiving this mail because: You are watching all bug changes.

1 21

[Bug 36130] New: ILL batches table not showing all batches
by bugzilla-daemon＠bugs.koha-community.org 17 Apr '24

17 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36130 Bug ID: 36130 Summary: ILL batches table not showing all batches Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: ILL Assignee: koha-bugs(a)lists.koha-community.org Reporter: pedro.amorim(a)ptfs-europe.com CC: pedro.amorim(a)ptfs-europe.com Depends on: 30719 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30719 [Bug 30719] ILL should provide the ability to create batch requests -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 31

[Bug 35335] New: Circulation history tab in patron information causes 500 error
by bugzilla-daemon＠bugs.koha-community.org 17 Apr '24

17 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35335 Bug ID: 35335 Summary: Circulation history tab in patron information causes 500 error Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: Patrons Assignee: stalkernoid(a)gmail.com Reporter: stalkernoid(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com To test: 1. Change syspref: RecordStaffUserOnCheckout to "record" 2. Choose a customer who has borrowed something before=has circulation history (e.g. customer 209 in koha-kktest https://koha-kktest.lib.helsinki.fi/cgi-bin/koha/mainpage.pl) and see that circulation history is can be seen. 3. Borrow something and see circulation history now -> got internal error (example customer id 232). 4. Change RecorsStaffUserOnCheckout to "don't record". 5. See the previous customer's circulation history now, should work as supposed. -- You are receiving this mail because: You are watching all bug changes.

1 20

[Bug 14007] Item types for items hidden by OpacHiddenItems turn up in facet results
by bugzilla-daemon＠bugs.koha-community.org 17 Apr '24

17 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14007 --- Comment #16 from Andreas Jonsson <andreas.jonsson(a)kreablo.se> --- Created attachment 164978 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=164978&action=e… Bug 14007: Hide hidden itemtypes in opac facets. Test plan: * Start koha-testing-docker with elasticsearch or opensearch (e.g., ku-es7) * Make sure there is a built index for Elastic/OpenSearch: > koha-elasticsearch --reset --rebuild kohadev * Search for "book" in opac and note the facet values for itemtype * Change systempreference SearchEngine to ElasticSearch * Search for "book" in opac and note the facet values for itemtype * Go to the adminstration view of one of the itemtypes (for instance Visual Materials) and check "Hide in OPAC". * Search for "book" in opac and make sure the hidden itemtype do not appear as facet. * Search for "book" in staff interface and make sure the hidden itemtype still does appear as a facet. * Change back the systemprefence to Zebra * Search for "book" in opac and make sure the hidden itemtype do not appear as facet. * Search for "book" in staff interface and make sure the hidden itemtype still does appear as a facet. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 14007] Item types for items hidden by OpacHiddenItems turn up in facet results
by bugzilla-daemon＠bugs.koha-community.org 17 Apr '24

17 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14007 Andreas Jonsson <andreas.jonsson(a)kreablo.se> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |Needs Signoff Patch complexity|--- |Small patch -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 21104] New: oai.pl returns wrong baseURL
by bugzilla-daemon＠bugs.koha-community.org 17 Apr '24

17 Apr '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21104 Bug ID: 21104 Summary: oai.pl returns wrong baseURL Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P4 Component: Web services Assignee: koha-bugs(a)lists.koha-community.org Reporter: pablo.bianchi(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Blocks: 21102 Related/continuation of: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17785#c11 When using Plack Koha anwer a "cooler" (bug 18410) but invalid baseURL, /opac/oai.pl instead of given URI. As Tomas said on bug #17785: > Our fix for the XSLT masked the underlying bug (our code doesn't know > about the proxypass we do, and then Plack answers what he knows, > /opac/oai.pl). Originally deteced with official validator: https://www.openarchives.org/Register/ValidateSite Tested with: curl -s "baseURL?verb=Identify" | xpath -q -e "/OAI-PMH/Identify/baseURL" Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=21102 [Bug 21102] OAI-PMH specification conformance [UMBRELLA] -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 8