March 2026 - Koha-bugs - lists.koha-community.org

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #420 from Jonathan Druart <jonathan.druart(a)gmail.com> --- Created attachment 195478 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=195478&action=e… Bug 38365: Fix Serials.t Patch from commit be3c79e -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #419 from Jonathan Druart <jonathan.druart(a)gmail.com> --- Created attachment 195477 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=195477&action=e… Bug 38365: Fix Koha/Middleware/ContentSecurityPolicy.t GIT_INSTALL is not set and we get the wrong root. The test suite does not pass on a non git install anyway. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #418 from Jonathan Druart <jonathan.druart(a)gmail.com> --- (In reply to Jonathan Druart from comment #417) > (In reply to David Cook from comment #53) > > (In reply to David Cook from comment #50) > > > This unit test is failing > > > t/db_dependent/Koha/Middleware/ContentSecurityPolicy.t > > > > > > Test Summary Report > > > ------------------- > > > t/db_dependent/Koha/Middleware/ContentSecurityPolicy.t (Wstat: 768 (exited > > > 3) Tests: 4 Failed: 3) > > > Failed tests: 2-4 > > > Non-zero exit status: 3 > > > Files=1, Tests=4, 0 wallclock secs ( 0.02 usr 0.00 sys + 0.38 cusr 0.14 > > > csys = 0.54 CPU) > > > Result: FAIL > > > > Actually, it looks like that's my fault because of an old KTD I'm using... > > if I run the following it works: > > > > GIT_INSTALL=1 KOHA_HOME=/kohadevbox/koha/ prove -v > > t/db_dependent/Koha/Middleware/ContentSecurityPolicy.t > > It's failing on Jenkins, I guess GIT_INSTALL is not passed. The test suite is not passing on a non git install anyway, I would suggest to remove this test. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #417 from Jonathan Druart <jonathan.druart(a)gmail.com> --- (In reply to David Cook from comment #53) > (In reply to David Cook from comment #50) > > This unit test is failing > > t/db_dependent/Koha/Middleware/ContentSecurityPolicy.t > > > > Test Summary Report > > ------------------- > > t/db_dependent/Koha/Middleware/ContentSecurityPolicy.t (Wstat: 768 (exited > > 3) Tests: 4 Failed: 3) > > Failed tests: 2-4 > > Non-zero exit status: 3 > > Files=1, Tests=4, 0 wallclock secs ( 0.02 usr 0.00 sys + 0.38 cusr 0.14 > > csys = 0.54 CPU) > > Result: FAIL > > Actually, it looks like that's my fault because of an old KTD I'm using... > if I run the following it works: > > GIT_INSTALL=1 KOHA_HOME=/kohadevbox/koha/ prove -v > t/db_dependent/Koha/Middleware/ContentSecurityPolicy.t It's failing on Jenkins, I guess GIT_INSTALL is not passed. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #416 from Jonathan Druart <jonathan.druart(a)gmail.com> --- Created attachment 195475 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=195475&action=e… Bug 38365: Fix Koha/UI/Form/Builder/Item.t # There were 16 warning(s) # Previous test 0 '' # Use of uninitialized value $csp_nonce in concatenation (.) or string at /kohadevbox/koha/Koha/FrameworkPlugin.pm line 381. # at /kohadevbox/koha/Koha/FrameworkPlugin.pm line 381. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #415 from Jonathan Druart <jonathan.druart(a)gmail.com> --- Created attachment 195474 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=195474&action=e… Bug 38365: Fix Koha/UI/Form/Builder/Biblio.t # Failed test at t/db_dependent/Koha/UI/Form/Builder/Biblio.t line 216. # '<script nonce=""> # $(document).ready(function () { # # }); # </script> # ' # doesn't match '(?^us:<script>.*</script>)' # Looks like you failed 1 test of 4. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 27976] New: Add Granular options to CircConfirmItemParts
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27976 Bug ID: 27976 Summary: Add Granular options to CircConfirmItemParts Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: lisetteslatah(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com It would be really nice if the "CircConfirmItemParts" added in bug 25261 wasn't all or nothing. We'd like to be able to force confirm on kits, hotspots, and book club kits but not on DVDs and Audiobooks. All of these have materials specified in our catalog. Hitting confirm on each DVD and audio check in and out would make our workflows much slower, but we'd like to be able to do it for some items still. Maybe there could be an option in the item type setup to exclude item types from the confirmation? -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 10

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |38407 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38407 [Bug 38407] Eliminate event handler attributes in the staff interface -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- QA Contact|testopia(a)bugs.koha-communit |jonathan.druart(a)gmail.com |y.org | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to main Version(s)| |26.05.00 released in| | --- Comment #414 from Jonathan Druart <jonathan.druart(a)gmail.com> --- Nice work everyone! Pushed to main for 26.05 -- You are receiving this mail because: You are watching all bug changes.

1 0