- Koha-bugs - lists.koha-community.org

[Bug 34369] Add CSRF protection to system preferences
by bugzilla-daemon＠bugs.koha-community.org 22 Nov '24

22 Nov '24

1 0

[Bug 35019] New: Can't delete news from the staff interface main page
by bugzilla-daemon＠bugs.koha-community.org 22 Nov '24

22 Nov '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35019 Bug ID: 35019 Summary: Can't delete news from the staff interface main page Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Staff interface Assignee: koha-bugs(a)lists.koha-community.org Reporter: emily-rose.francoeur(a)inLibro.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com It’s no longer possible to delete news entries from the homepage in the staff interface. To reproduce the bug: 1) Go to “Tools > News > New entry” 2) “Display location” should be set to “Staff interface” 3) Fill in the fields 4) Return to the homepage 5) Try to delete the newly created news entry 6) The “Additional contents” page is displayed with the message “There are no additional contents.” 7) Return to the homepage; the news entry is not deleted. The “Additional contents” page expects to receive a CSRF token, but none is sent, causing the issue. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 18

[Bug 34368] Add CSRF protection to Content Management pages
by bugzilla-daemon＠bugs.koha-community.org 22 Nov '24

22 Nov '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34368 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|Pushed to oldstable |RESOLVED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 34761] Stored/reflected XSS with searches and saved search filters
by bugzilla-daemon＠bugs.koha-community.org 22 Nov '24

22 Nov '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34761 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to oldstable |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 34761] Stored/reflected XSS with searches and saved search filters
by bugzilla-daemon＠bugs.koha-community.org 22 Nov '24

22 Nov '24

1 0

[Bug 34368] Add CSRF protection to Content Management pages
by bugzilla-daemon＠bugs.koha-community.org 22 Nov '24

22 Nov '24

1 0

[Bug 36169] New: Add guarantee to patron categories with type='Staff'
by bugzilla-daemon＠bugs.koha-community.org 22 Nov '24

22 Nov '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36169 Bug ID: 36169 Summary: Add guarantee to patron categories with type='Staff' Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: alexbuckley(a)catalyst.net.nz QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com Currently the 'Add guarantee' link is only available if a patron account has a patron category with type='Adult' or 'Organisation' - see https://git.koha-community.org/Koha-community/Koha/src/branch/master/koha-t… It would be good if library staff - whose patron category has type='Staff' - could also see the link and add a guarantee as well. Library staff belonging to a patron category with the type of 'Staff' is important because it adds a layer of protection to these accounts from being altered - a user must have the 'staffaccess' permission to change them. Therefore, it's not realistic to simply switch the library staff category to have type='Adult' so they can have guarantees added. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 21

[Bug 14787] Allow confirm/continue option to circulation warnings at checkout
by bugzilla-daemon＠bugs.koha-community.org 22 Nov '24

22 Nov '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14787 Katrin Fischer <katrin.fischer(a)bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|release-notes-needed | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 14787] Allow confirm/continue option to circulation warnings at checkout
by bugzilla-daemon＠bugs.koha-community.org 22 Nov '24

22 Nov '24

1 0

[Bug 37929] New: Cypress tests for Agreements aren't all running
by bugzilla-daemon＠bugs.koha-community.org 22 Nov '24

22 Nov '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37929 Bug ID: 37929 Summary: Cypress tests for Agreements aren't all running Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Test Suite Assignee: chris(a)bigballofwax.co.nz Reporter: matt.blenkinsop(a)ptfs-europe.com QA Contact: testopia(a)bugs.koha-community.org There is an it.only in Agreements_spec.ts that needs removing to allow all tests to run -- You are receiving this mail because: You are watching all bug changes.

1 15