March 2026 - Koha-bugs - lists.koha-community.org

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #194448|0 |1 is obsolete| | --- Comment #313 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 194605 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194605&action=e… Bug 38365: (follow-up) Merge CSP middleware tests It seems the test outside of db_dependent required presence of database after all To test: 1. prove t/db_dependent/Koha/Middleware/ContentSecurityPolicy.t -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #194441|0 |1 is obsolete| | --- Comment #312 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 194604 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194604&action=e… Bug 38365: Use Koha::Devel::Files->ls_tt_files in add_csp_nonces.pl -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #194440|0 |1 is obsolete| | --- Comment #311 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 194603 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194603&action=e… Bug 38365: Add xt test -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #194428|0 |1 is obsolete| | --- Comment #310 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 194602 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194602&action=e… Bug 38365: Switch from using ENV to package level variable for nonce caching -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #194427|0 |1 is obsolete| | --- Comment #309 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 194601 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194601&action=e… Bug 38365: Add warning that intranet/staff interface is not ready for "enabled" mode yet -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #194426|0 |1 is obsolete| | --- Comment #308 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 194600 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194600&action=e… Bug 38365: Fix csp/csp-reports tag in API spec -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #194425|0 |1 is obsolete| | --- Comment #307 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 194599 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194599&action=e… Bug 38365: Remove old usage of Koha::Cache::Memory::Lite -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #194424|0 |1 is obsolete| | --- Comment #306 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 194598 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194598&action=e… Bug 38365: Replace `use strict; use warnings;` with `use Modern::Perl` -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #194423|0 |1 is obsolete| | --- Comment #305 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 194597 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194597&action=e… Bug 38365: Remove old default values from koha-conf* files -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #194374|0 |1 is obsolete| | --- Comment #304 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 194596 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194596&action=e… Bug 38365: Fix new_line_at_the_end_of_file QA failure [FAIL] api/v1/swagger/definitions/csp_report.yaml FAIL new_line_at_the_end_of_file Missing new line at the end of file, make sure your editor correctly reads .editorconfig ('insert_final_newline = true'). See bug 40541. -- You are receiving this mail because: You are watching all bug changes.

1 0