From bugzilla-daemon@bugs.koha-community.org Fri Feb  2 17:06:02 2024
From: bugzilla-daemon@bugs.koha-community.org
To: koha-bugs@lists.koha-community.org
Subject: [Koha-bugs] [Bug 5920] Remove HTML from downloaded reports
Date: Fri, 02 Feb 2024 16:06:00 +0000
Message-ID: <bug-5920-70-vf8lu4IVlE@https.bugs.koha-community.org/bugzilla3/>
In-Reply-To: <bug-5920-70@https.bugs.koha-community.org/bugzilla3/>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============4371600223851361849=="

--===============4371600223851361849==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=3D5920

--- Comment #16 from Andrew Fuerste-Henry <andrewfh@dubcolib.org> ---
Martin, can you please provide a test plan? What I've tried doesn't seem to
work, but perhaps I'm misunderstanding your intent.

Here's what I did:
 - apply patch
 - cpan HTML:Restrict
 - restart_all
 - create a new report from SQL:
    "select concat('<h1>','Hello world','</h1>') as message"
 - run report
 - click Download, select CSV format
 - open csv in text editor

I expected my CSV to contain "Hello world" without the <hi> tags, but I got:

message
"<h1>Hello world</h1>"

I also tried:
SELECT
  biblionumber,=20
  CONCAT('<a
href=3D\"/cgi-bin/koha/catalogue/detail.pl?biblionumber=3D',biblionumber,'\">=
',title,'</a>')
AS Title=20
  from biblio

and ended up with a csv containing:
biblionumber,Title
12484,"<a href=3D""/cgi-bin/koha/catalogue/detail.pl?biblionumber=3D12484"">T=
he
mask</a>"

--=20
You are receiving this mail because:
You are the QA Contact for the bug.
You are watching all bug changes.

--===============4371600223851361849==--