June 2025 - Koha-bugs - lists.koha-community.org

[Bug 36630] New: Item search batch operations buttons broken by CRSF
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '25

23 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36630 Bug ID: 36630 Summary: Item search batch operations buttons broken by CRSF Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: blawlor(a)clamsnet.org QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl Since Bug 34478 Full CSRF protection some POST requests return 403 with an error and need to be ajusted. On the Item search results page, the Batch operations buttons are broken and need to be changed to GET. To recreate: 1. Do an item search 2. On the results page 'click Select visible rows' 3. Click 'Batch operations' and select 'Batch item modification' 4. See Programming error - op 'show' must start with 'cud-' for POST http://localhost:8081/intranet/tools/batchMod.pl (referer: http://localhost:8081/cgi-bin/koha/catalogue/itemsearch.pl) 5. Click 'Batch operations' and select 'Batch item deletion' 6. See the same error -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 14

[Bug 36384] New: 'Used saved' typo in guided reports
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '25

23 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36384 Bug ID: 36384 Summary: 'Used saved' typo in guided reports Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: trivial Priority: P5 - low Component: Templates Assignee: oleonard(a)myacpl.org Reporter: tomascohen(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org -- You are receiving this mail because: You are watching all bug changes.

1 12

[Bug 36568] New: Changing rows per page on a custom report is broken
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '25

23 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36568 Bug ID: 36568 Summary: Changing rows per page on a custom report is broken Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Reports Assignee: emily.lamancusa(a)montgomerycountymd.gov Reporter: emily.lamancusa(a)montgomerycountymd.gov QA Contact: testopia(a)bugs.koha-community.org Depends on: 34478 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 [Bug 34478] Full CSRF protection -- You are receiving this mail because: You are watching all bug changes.

1 12

[Bug 36336] New: Exporting records from detail page is broken
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '25

23 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36336 Bug ID: 36336 Summary: Exporting records from detail page is broken Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl When exporting a record from the detail page in the staff interface, almost all formats give an Error 500 - Internal server error. But with tail -f /var/log/koha/kohadev/*.log there doesn't seem to be anything in the logs? -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 15

[Bug 36368] New: Cannot save new patron after error
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '25

23 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36368 Bug ID: 36368 Summary: Cannot save new patron after error Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: emmi.takkinen(a)koha-suomi.fi QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com If an error occurs while adding new patron, after fixing the error and hitting save, patron entry page reloads to "Modify patron" section and error "Patron not found. Return to search" is displayed. But no patron is saved. To reproduce: 1. Add new patron and cause an error (wrong age etc.). 2. Attempt to save patron, error message is displayed. 3. Fix your errors and attempt to save again. => Error message "Patron not found. Return to search" is displayed and new patron is not saved to database. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 22

[Bug 36351] New: CSRF Adjustments for Cataloguing editor
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '25

23 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36351 Bug ID: 36351 Summary: CSRF Adjustments for Cataloguing editor Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl koha-backend.js uses a lot of post requests to the svc api, we need to cover these. This si complicated by the fact that these apis return xml and not json as we usually do -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 29

[Bug 36349] New: Login for SCO/SCI broken by CSRF
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '25

23 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36349 Bug ID: 36349 Summary: Login for SCO/SCI broken by CSRF Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Self checkout Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org bug 36102 / bug 34478 added the csrf token to opac-auth for patron login, however, it isn't used for SCO/SCI logins -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 47

[Bug 36274] New: OPAC suggestions form doesn't display
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '25

23 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36274 Bug ID: 36274 Summary: OPAC suggestions form doesn't display Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org When in the OPAC and I click on "New suggestion", only an empty page comes up. The form is missing. I didn't see anything in the logs. Not sure if this is related to CSRF or not? -- You are receiving this mail because: You are watching all bug changes.

1 21

[Bug 36243] New: ILL "Edit request" action is broken
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '25

23 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36243 Bug ID: 36243 Summary: ILL "Edit request" action is broken Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: ILL Assignee: pedro.amorim(a)ptfs-europe.com Reporter: pedro.amorim(a)ptfs-europe.com CC: david(a)davidnind.com, martin.renvoize(a)ptfs-europe.com, nugged(a)gmail.com, pedro.amorim(a)ptfs-europe.com, tomascohen(a)gmail.com, victor(a)tuxayo.net Depends on: 34478 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 [Bug 34478] Full CSRF protection -- You are receiving this mail because: You are watching all bug changes.

1 21

[Bug 36280] New: Viewing batch of staged records broken: CSRF token error
by bugzilla-daemon＠bugs.koha-community.org 23 Jun '25

23 Jun '25

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36280 Bug ID: 36280 Summary: Viewing batch of staged records broken: CSRF token error Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: victor(a)tuxayo.net QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl 1. Stage a batch 2. When it's done, click on "view batch" 3. Page loads but pops an alert that says "403: Forbidden" and table stays empty network tool show an XHR to /cgi-bin/koha/tools/batch_records_ajax.pl that returns 403. The content can be save in an HTML file and opened to show a page that says: > An error has occurred! > Error 403 > Programming error - No CSRF token passed for POST Going to "Manage staged MARC records" and view an existing batch has the same outcome. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 5