From bugzilla-daemon@bugs.koha-community.org Thu Aug 15 23:28:07 2024 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 37656] New: Advanced editor needs to HTML-escape Z39.50 search results Date: Thu, 15 Aug 2024 21:28:06 +0000 Message-ID: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============8926412599980273201==" --===============8926412599980273201== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3D37656 Bug ID: 37656 Summary: Advanced editor needs to HTML-escape Z39.50 search results Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: major Priority: P3 Component: Cataloging Assignee: koha-bugs@lists.koha-community.org Reporter: phil@chetcolibrary.org QA Contact: testopia@bugs.koha-community.org CC: m.de.rooy@rijksmuseum.nl Noticed because for some reason OCLC records cataloged in German for English works have a leading article in the title surrounded by << >>, which in the advanced editor's Z39.50 search results appear as "< > Title" for a record wi= th "<> Title" and for <> Title the word Title appears as a link. Steps to reproduce: 1. Set EnableAdvancedCatalogingEditor to Enable 2. Edit any bib record, paste at the = end of 245=E2=80=A1a and save 3. Below the search fields in the left sidebar, click Advanced =C2=BB 4. Check the checkbox for Local catalog, uncheck any others that are checked, and search for anything that will return the record you altered. 5. Get an alert() from Z30.50 search results. --=20 You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug. --===============8926412599980273201==-- From bugzilla-daemon@bugs.koha-community.org Fri Oct 18 11:28:01 2024 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 37656] XSS in Advanced editor for Z39.50 search results Date: Fri, 18 Oct 2024 09:28:00 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============4075332479605958700==" --===============4075332479605958700== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37656 Katrin Fischer changed: What |Removed |Added ---------------------------------------------------------------------------- Text to go in the|24.05.04 |24.05.04,23.11.09,23.05.15 release notes| | Group|Koha security | Product|Koha security |Koha Component|Koha |Cataloging -- You are receiving this mail because: You are watching all bug changes. --===============4075332479605958700==-- From bugzilla-daemon@bugs.koha-community.org Fri Oct 18 12:18:28 2024 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 37656] XSS in Advanced editor for Z39.50 search results Date: Fri, 18 Oct 2024 10:17:24 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============7459332434748274878==" --===============7459332434748274878== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37656 Katrin Fischer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to main Version(s)| |24.11.00 released in| | -- You are receiving this mail because: You are watching all bug changes. --===============7459332434748274878==-- From bugzilla-daemon@bugs.koha-community.org Fri Oct 18 12:18:38 2024 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 37656] XSS in Advanced editor for Z39.50 search results Date: Fri, 18 Oct 2024 10:17:26 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1608408294725782743==" --===============1608408294725782743== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37656 --- Comment #10 from Katrin Fischer --- Pushed for 24.11! Well done everyone, thank you! -- You are receiving this mail because: You are watching all bug changes. --===============1608408294725782743==-- From bugzilla-daemon@bugs.koha-community.org Fri Oct 18 12:19:39 2024 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 37656] XSS in Advanced editor for Z39.50 search results Date: Fri, 18 Oct 2024 10:18:36 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============4726569466266391870==" --===============4726569466266391870== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37656 Katrin Fischer changed: What |Removed |Added ---------------------------------------------------------------------------- Text to go in the|24.05.04,23.11.09,23.05.15 | release notes| | Version(s)|24.11.00 |24.11.00,24.05.04,23.11.09, released in| |23.05.15 -- You are receiving this mail because: You are watching all bug changes. --===============4726569466266391870==-- From bugzilla-daemon@bugs.koha-community.org Fri Oct 18 12:21:43 2024 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 37656] XSS in Advanced editor for Z39.50 search results Date: Fri, 18 Oct 2024 10:21:28 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3581000140746454361==" --===============3581000140746454361== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37656 Katrin Fischer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |Pushed to stable -- You are receiving this mail because: You are watching all bug changes. --===============3581000140746454361==-- From bugzilla-daemon@bugs.koha-community.org Fri Oct 18 12:21:53 2024 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 37656] XSS in Advanced editor for Z39.50 search results Date: Fri, 18 Oct 2024 10:21:33 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============7330154331025656152==" --===============7330154331025656152== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37656 Katrin Fischer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to stable |Pushed to oldstable -- You are receiving this mail because: You are watching all bug changes. --===============7330154331025656152==-- From bugzilla-daemon@bugs.koha-community.org Fri Oct 18 12:22:03 2024 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 37656] XSS in Advanced editor for Z39.50 search results Date: Fri, 18 Oct 2024 10:21:38 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5076818037666628153==" --===============5076818037666628153== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37656 Katrin Fischer changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to oldstable |Pushed to oldoldstable -- You are receiving this mail because: You are watching all bug changes. --===============5076818037666628153==-- From bugzilla-daemon@bugs.koha-community.org Fri Nov 15 00:37:05 2024 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 37656] XSS in Advanced editor for Z39.50 search results Date: Thu, 14 Nov 2024 23:37:04 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0648451269463522794==" --===============0648451269463522794== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37656 Phil Ringnalda changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |rel_22_11_candidate -- You are receiving this mail because: You are watching all bug changes. --===============0648451269463522794==-- From bugzilla-daemon@bugs.koha-community.org Mon Mar 31 11:52:15 2025 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 37656] XSS in Advanced editor for Z39.50 search results Date: Mon, 31 Mar 2025 09:51:20 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============4012792178103440663==" --===============4012792178103440663== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37656 Jesse Maseto changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jesse@bywatersolutions.com --- Comment #11 from Jesse Maseto --- Pushed to 22.11.x. Will be in next point release. 22.11.25 -- You are receiving this mail because: You are watching all bug changes. --===============4012792178103440663==-- From bugzilla-daemon@bugs.koha-community.org Mon Mar 31 11:52:36 2025 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 37656] XSS in Advanced editor for Z39.50 search results Date: Mon, 31 Mar 2025 09:52:14 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============8721353922948563735==" --===============8721353922948563735== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37656 Jesse Maseto changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to oldoldstable |Pushed to oldoldoldstable -- You are receiving this mail because: You are watching all bug changes. --===============8721353922948563735==-- From bugzilla-daemon@bugs.koha-community.org Mon Jun 23 08:02:24 2025 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 37656] XSS in Advanced editor for Z39.50 search results Date: Mon, 23 Jun 2025 06:02:23 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0357779307767408787==" --===============0357779307767408787== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37656 Wainui Witika-Park changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)|24.11.00,24.05.04,23.11.09, |24.11.00,24.05.04,23.11.09, released in|23.05.15 |23.05.15,22.11.25 Status|Pushed to oldoldoldstable |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are watching all bug changes. --===============0357779307767408787==--