- Koha-bugs - lists.koha-community.org

[Bug 34478] Full CSRF protection
by bugzilla-daemon＠bugs.koha-community.org 04 Mar '24

04 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |36219 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36219 [Bug 36219] State parameter broken for OIDC/Oauth -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36084] Pass CSRF token to SVC scripts (1/2)
by bugzilla-daemon＠bugs.koha-community.org 04 Mar '24

04 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36084 --- Comment #39 from Jonathan Druart <jonathan.druart(a)gmail.com> --- Last patch pushed to master. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36084] Pass CSRF token to SVC scripts (1/2)
by bugzilla-daemon＠bugs.koha-community.org 04 Mar '24

04 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36084 --- Comment #38 from Tomás Cohen Arazi <tomascohen(a)gmail.com> --- Created attachment 162712 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=162712&action=e… Bug 36084: Fix cookie domain for www/ tests This patch changes the hardcoded `koha.local` value on t::lib::Mocks::Zebra so tests don't fail when the domain is not `koha`. To test: 1. Run: $ ktd --shell k$ export KOHA_INTRANET_URL=http://kohadev-intra.myDNSname.org:8081 k$ prove t/db_dependent/www/batch.t => FAIL: Tests fail! 2. Apply this patch 3. Repeat 1 => SUCCESS: Tests pass! 4. Sign off :-D Signed-off-by: Tomas Cohen Arazi <tomascohen(a)theke.io> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36072] Can request articles even if ArticleRequests is off
by bugzilla-daemon＠bugs.koha-community.org 04 Mar '24

04 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36072 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to oldoldstable |Pushed to oldoldoldstable -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36072] Can request articles even if ArticleRequests is off
by bugzilla-daemon＠bugs.koha-community.org 04 Mar '24

04 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36072 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to oldstable |Pushed to oldoldstable -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36072] Can request articles even if ArticleRequests is off
by bugzilla-daemon＠bugs.koha-community.org 04 Mar '24

04 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36072 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to stable |Pushed to oldstable Version(s)|24.05.00,23.11.03 |24.05.00,23.11.03,23.05.09, released in| |22.11.15,22.05.19 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36072] Can request articles even if ArticleRequests is off
by bugzilla-daemon＠bugs.koha-community.org 04 Mar '24

04 Mar '24

1 0

[Bug 35941] OPAC user can guess clubs of other users
by bugzilla-daemon＠bugs.koha-community.org 04 Mar '24

04 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35941 --- Comment #10 from Fridolin Somers <fridolin.somers(a)biblibre.com> --- @Lucas I don't see this in 23.05.09 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 35941] OPAC user can guess clubs of other users
by bugzilla-daemon＠bugs.koha-community.org 04 Mar '24

04 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35941 Fridolin Somers <fridolin.somers(a)biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to master |Pushed to stable Version(s)|24.05.00 |24.05.00,23.11.03 released in| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 35941] OPAC user can guess clubs of other users
by bugzilla-daemon＠bugs.koha-community.org 04 Mar '24

04 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35941 --- Comment #9 from Fridolin Somers <fridolin.somers(a)biblibre.com> --- (In reply to Frédéric Demians from comment #8) > Complex to backport to 22.11 due to patch 33895 which changed a lot of code. > Is that bad if it's not backported? I see it in now in 22.11.15 -- You are receiving this mail because: You are watching all bug changes.

1 0