February 2026 - Koha-bugs - lists.koha-community.org

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Lari Taskula <lari.taskula(a)hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193309|0 |1 is obsolete| | --- Comment #197 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193708 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193708&action=e… Bug 38365: (QA follow-up) Fix param sample indentation -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Lari Taskula <lari.taskula(a)hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193308|0 |1 is obsolete| | --- Comment #196 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193707 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193707&action=e… Bug 38365: Restore violated-directive The violated-directive is a historic name for the effective-directive field and contains the same value. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Lari Taskula <lari.taskula(a)hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193307|0 |1 is obsolete| | --- Comment #195 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193706 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193706&action=e… Bug 38365: (follow-up) Add support for both CSP report syntaxes This patch fixes failing tests from the previous patch and adds more tests that cover multiple violation reports in one POST request. To test: 1. prove t/db_dependent/api/v1/public/csp_reports.t -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Lari Taskula <lari.taskula(a)hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193306|0 |1 is obsolete| | --- Comment #194 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193705 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193705&action=e… Bug 38365: Add support for both CSP report syntaxes Signed-off-by: Lari Taskula <lari.taskula(a)hypernova.fi> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 22459] New: Shibboleth create/sync: Allow mapping of extended patron attributes
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22459 Bug ID: 22459 Summary: Shibboleth create/sync: Allow mapping of extended patron attributes Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Authentication Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org Depends on: 18507 Target Milestone: --- It woudl be great if extended patron attributes could be mapped for provisioning with Shibboleth as well. One use case would be a unique key, that is also used/neded for patron imports and stored in an unique extended patron attribute. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18507 [Bug 18507] Shibboleth auto-provisioning - Sync -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 2

[Bug 38519] New: Improve contrast of Bootstrap alerts and text background classes
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38519 Bug ID: 38519 Summary: Improve contrast of Bootstrap alerts and text background classes Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Templates Assignee: oleonard(a)myacpl.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org Depends on: 35402 Created attachment 174934 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=174934&action=e… Screenshot showing examples of Bootstrap alerts and text with background Some of the built-in Bootstrap alert and text background classes aren't working very well in terms of visibility and contrast. The "info" alert should stand out more, and the text background classes don't all have usable contrast. See the attached screenshot. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35402 [Bug 35402] Update the OPAC and staff interface to Bootstrap 5 -- You are receiving this mail because: You are watching all bug changes.

1 29

[Bug 38986] New: Restore "Any" option to purchase suggestion filter by fund
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38986 Bug ID: 38986 Summary: Restore "Any" option to purchase suggestion filter by fund Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: andrew(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Depends on: 37246 The suggestions management page includes a filter by fund. On the left side of the page, click Acquisition Information to reveal a Fund dropdown. Prior to Bug 37246, this dropdown included and defaulted to the option of "Any." Bug 37246 wrapped that "ANY" option in "[% IF op == 'save' %]." I don't see why that change was made or what it accomplishes. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37246 [Bug 37246] Suggestions filter by fund displays inactive budgets -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 33

[Bug 38957] New: EDIFACT messages table should sort by Transferred date descending by default
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38957 Bug ID: 38957 Summary: EDIFACT messages table should sort by Transferred date descending by default Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Prior to bug 30070 we showed the most recent edifact messages first: > order_by => { -desc => 'transfer_date' }, We need to restore this functionality when loading the messages via the api -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 21

[Bug 38853] New: 'Cancel selected' on holds table does not work
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38853 Bug ID: 38853 Summary: 'Cancel selected' on holds table does not work Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: pedro.amorim(a)ptfs-europe.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com Depends on: 37783 To reproduce: 1) Place a hold on a record 2) On the "existing holds" table, check a hold. 3) Click 'Cancel selected". Nothing happens. Ever. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37783 [Bug 37783] Fix form that looks like it would POST without an op in reserve/request.tt -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 24

[Bug 38679] New: GET /deleted/biblios missing some mappings
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38679 Bug ID: 38679 Summary: GET /deleted/biblios missing some mappings Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: tomascohen(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: tomascohen(a)gmail.com When we implemented the `GET /deleted/biblios` endpoint, we missing the mapping for the `biblioitems` table attributes. To reproduce: 1. Pick a sample record ID 2. Fetch is using the API with your favourite tool: GET /api/v1/biblios/<the ID> Accept: application/json 3. Save the output for later 4. Delete the record 5. Fetch the deleted biblio using the API: GET /api/v1/deleted/biblios/<the ID> Accept: application/json 6. Compare the results => FAIL: Attributes like `volumedate` are not mapped! -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 20