From bugzilla-daemon@bugs.koha-community.org Wed May 27 22:53:06 2026 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 42702] New: Acquisitions: Cancel order link on parcel.pl absorbs following HTML into href Date: Wed, 27 May 2026 20:52:55 +0000 Message-ID: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============4894178296045463255==" --===============4894178296045463255== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3D42702 Bug ID: 42702 Summary: Acquisitions: Cancel order link on parcel.pl absorbs following HTML into href Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Acquisitions Assignee: nugged@gmail.com Reporter: nugged@gmail.com QA Contact: testopia@bugs.koha-community.org The pending orders table on parcel.pl builds a malformed "Cancel order" link. The generated href is not closed after the invoice_id value, so the link text and following HTML are appended to the href. Steps to reproduce: 1. In Acquisitions, create or use a closed basket with a pending order. 2. Receive a shipment for the vendor and open the invoice receive page. 3. Inspect the "Cancel order" link in the pending orders table. Expected result: The link is rendered as valid HTML: Cancel order Actual result: The link text and following HTML are included in the href: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0007761549109756339==" --===============0007761549109756339== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3D42702 --- Comment #1 from Andrii Nugged --- Created attachment 199601 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=3D199601&action= =3Dedit Bug 42702: Fix malformed cancel links on parcel.pl The pending orders table builds the two cancel order links with the link text concatenated immediately after the invoice_id value. This leaves the href attribute unclosed and makes the browser absorb the link text and following escaped HTML into the href. Add the missing separator after invoice_id for both cancel link builders. Test plan: 1. Create a closed acquisition basket with a pending order. 2. Open an invoice receive page for the vendor. 3. Inspect the Cancel order link in the pending orders table. 4. Confirm the href ends after invoiceid and the link text is outside the hre= f. --=20 You are receiving this mail because: You are watching all bug changes. --===============0007761549109756339==-- From bugzilla-daemon@bugs.koha-community.org Wed May 27 23:51:12 2026 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 42702] Acquisitions: Cancel order link on parcel.pl absorbs following HTML into href Date: Wed, 27 May 2026 21:51:12 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============6112109222377395741==" --===============6112109222377395741== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42702 Andrii Nugged changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |Needs Signoff -- You are receiving this mail because: You are watching all bug changes. --===============6112109222377395741==-- From bugzilla-daemon@bugs.koha-community.org Thu May 28 13:36:05 2026 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 42702] Acquisitions: Cancel order link on parcel.pl absorbs following HTML into href Date: Thu, 28 May 2026 11:36:05 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============2247497871898853834==" --===============2247497871898853834== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42702 Owen Leonard changed: What |Removed |Added ---------------------------------------------------------------------------- Patch complexity|--- |Trivial patch Status|Needs Signoff |Signed Off -- You are receiving this mail because: You are watching all bug changes. --===============2247497871898853834==-- From bugzilla-daemon@bugs.koha-community.org Thu May 28 13:36:15 2026 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 42702] Acquisitions: Cancel order link on parcel.pl absorbs following HTML into href Date: Thu, 28 May 2026 11:36:06 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============2575966427028275127==" --===============2575966427028275127== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42702 Owen Leonard changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #199601|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes. --===============2575966427028275127==-- From bugzilla-daemon@bugs.koha-community.org Thu May 28 13:36:25 2026 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 42702] Acquisitions: Cancel order link on parcel.pl absorbs following HTML into href Date: Thu, 28 May 2026 11:36:08 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5688771354375251536==" --===============5688771354375251536== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3D42702 --- Comment #2 from Owen Leonard --- Created attachment 199608 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=3D199608&action= =3Dedit Bug 42702: Fix malformed cancel links on parcel.pl The pending orders table builds the two cancel order links with the link text concatenated immediately after the invoice_id value. This leaves the href attribute unclosed and makes the browser absorb the link text and following escaped HTML into the href. Add the missing separator after invoice_id for both cancel link builders. Test plan: 1. Create a closed acquisition basket with a pending order. 2. Open an invoice receive page for the vendor. 3. Inspect the Cancel order link in the pending orders table. 4. Confirm the href ends after invoiceid and the link text is outside the hre= f. Signed-off-by: Owen Leonard --=20 You are receiving this mail because: You are watching all bug changes. --===============5688771354375251536==-- From bugzilla-daemon@bugs.koha-community.org Thu May 28 16:45:35 2026 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 42702] Acquisitions: Cancel order link on parcel.pl absorbs following HTML into href Date: Thu, 28 May 2026 14:45:35 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0839435250101418233==" --===============0839435250101418233== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42702 Jonathan Druart changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Signed Off |Passed QA Severity|normal |major CC| |jonathan.druart@gmail.com Keywords| |rel_26_05_candidate --- Comment #3 from Jonathan Druart --- Oops, sorry about that! -- You are receiving this mail because: You are watching all bug changes. --===============0839435250101418233==-- From bugzilla-daemon@bugs.koha-community.org Thu May 28 16:45:49 2026 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 42702] Acquisitions: Cancel order link on parcel.pl absorbs following HTML into href Date: Thu, 28 May 2026 14:45:49 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1477725786567869336==" --===============1477725786567869336== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42702 Jonathan Druart changed: What |Removed |Added ---------------------------------------------------------------------------- QA Contact|testopia@bugs.koha-communit |jonathan.druart@gmail.com |y.org | -- You are receiving this mail because: You are watching all bug changes. --===============1477725786567869336==-- From bugzilla-daemon@bugs.koha-community.org Thu May 28 16:46:00 2026 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 42702] Acquisitions: Cancel order link on parcel.pl absorbs following HTML into href Date: Thu, 28 May 2026 14:45:50 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============7466530933114203672==" --===============7466530933114203672== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42702 Jonathan Druart changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #199608|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes. --===============7466530933114203672==-- From bugzilla-daemon@bugs.koha-community.org Thu May 28 16:46:10 2026 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 42702] Acquisitions: Cancel order link on parcel.pl absorbs following HTML into href Date: Thu, 28 May 2026 14:45:51 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============2203012615869775105==" --===============2203012615869775105== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3D42702 --- Comment #4 from Jonathan Druart --- Created attachment 199614 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=3D199614&action= =3Dedit Bug 42702: Fix malformed cancel links on parcel.pl The pending orders table builds the two cancel order links with the link text concatenated immediately after the invoice_id value. This leaves the href attribute unclosed and makes the browser absorb the link text and following escaped HTML into the href. Add the missing separator after invoice_id for both cancel link builders. Test plan: 1. Create a closed acquisition basket with a pending order. 2. Open an invoice receive page for the vendor. 3. Inspect the Cancel order link in the pending orders table. 4. Confirm the href ends after invoiceid and the link text is outside the hre= f. Signed-off-by: Owen Leonard Signed-off-by: Jonathan Druart --=20 You are receiving this mail because: You are watching all bug changes. --===============2203012615869775105==-- From bugzilla-daemon@bugs.koha-community.org Fri Jun 5 16:32:00 2026 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 42702] Acquisitions: Cancel order link on parcel.pl absorbs following HTML into href Date: Fri, 05 Jun 2026 14:27:39 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3554451015831731294==" --===============3554451015831731294== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42702 Pedro Amorim (ammopt) changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to main Version(s)| |26.11.00 released in| | -- You are receiving this mail because: You are watching all bug changes. --===============3554451015831731294==-- From bugzilla-daemon@bugs.koha-community.org Fri Jun 5 16:32:10 2026 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 42702] Acquisitions: Cancel order link on parcel.pl absorbs following HTML into href Date: Fri, 05 Jun 2026 14:27:41 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5177119509717277181==" --===============5177119509717277181== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42702 --- Comment #5 from Pedro Amorim (ammopt) --- Thanks everyone! Pushed to main for 26.11! -- You are receiving this mail because: You are watching all bug changes. --===============5177119509717277181==-- From bugzilla-daemon@bugs.koha-community.org Tue Jul 7 16:11:00 2026 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 42702] Acquisitions: Cancel order link on parcel.pl absorbs following HTML into href Date: Tue, 07 Jul 2026 14:10:43 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============7711464065339233773==" --===============7711464065339233773== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42702 Lucas Gass (lukeg) changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)|26.11.00 |26.11.00,26.05.02 released in| | Status|Pushed to main |Pushed to stable -- You are receiving this mail because: You are watching all bug changes. --===============7711464065339233773==-- From bugzilla-daemon@bugs.koha-community.org Tue Jul 7 16:11:10 2026 From: bugzilla-daemon@bugs.koha-community.org To: koha-bugs@lists.koha-community.org Subject: [Koha-bugs] [Bug 42702] Acquisitions: Cancel order link on parcel.pl absorbs following HTML into href Date: Tue, 07 Jul 2026 14:10:45 +0000 Message-ID: In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============7145503639894554024==" --===============7145503639894554024== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42702 --- Comment #6 from Lucas Gass (lukeg) --- Nice work everyone! Pushed to 26.05.x for the upcoming 26.05.02 release. -- You are receiving this mail because: You are watching all bug changes. --===============7145503639894554024==--