- Koha-bugs - lists.koha-community.org

[Bug 20208] New: Development - Peddie School - Custom file upload paths
by bugzilla-daemon＠bugs.koha-community.org 22 Feb '22

22 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=20208 Bug ID: 20208 Summary: Development - Peddie School - Custom file upload paths Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: jesse(a)bywatersolutions.com Reporter: kyle(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Work to be done: 1) Add option on file upload page to not add file checksum to the uploaded filename, modify Koha::Upload 2) Modify Koha::Upload to support this option 3) Create new Authorised Value UPLOAD_PATH to define a set of upload paths 4) Add new 'upload path' option to file upload form as a pulldown of defined upload paths 5) Add new column 'file_path' to uploaded_files table 6) Modify Koha::Upload to support the automatic creation and use of custom file upload paths 7) Write unit tests for new functionality -- You are receiving this mail because: You are watching all bug changes.

1 19

[Bug 28832] New: Batch modification always clears permanent_location if it is mapped in frameworks
by bugzilla-daemon＠bugs.koha-community.org 22 Feb '22

22 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28832 Bug ID: 28832 Summary: Batch modification always clears permanent_location if it is mapped in frameworks Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Tools Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org On bug 27837 we ensured that the value for permanent_location was always passed through to the edit Unfortunately - when performing a batch mod the field is not set if we don't want to change it or clear it Forcing the pass through then means we clear the field on every update To recreate: 1 - In frameworks add a new subfield to 952, "C" - make it editable in items tab and visible in intranet/editor 2 - In mappings map that subfield to items.permanent_location 3 - Set an item to have differing shelving location and permanent_location 4 - This saves correctly for an individual item 5 - Edit the item using Tools->batch item modification, updating the note field 6 - Note the permanet_location is removed 7 - Check the DB, the field is set to NULL -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 35

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 22 Feb '22

22 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 --- Comment #59 from wainuiwitikapark(a)catalyst.net.nz --- Applied 19.11 patches to 19.11.x branch -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 22 Feb '22

22 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 wainuiwitikapark(a)catalyst.net.nz changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #130936|0 |1 is obsolete| | --- Comment #58 from wainuiwitikapark(a)catalyst.net.nz --- Created attachment 131004 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=131004&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: unimarc_field_4XX.tt To test, edit a MARC framework to link a subfield to the unimarc_field_4XX.tt. The process of triggering the plugin and selecting a search result from the plugin popup should work correctly. Signed-off-by: Wainui Witika-Park <wainuiwitikapark(a)catalyst.net.nz> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 22 Feb '22

22 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 wainuiwitikapark(a)catalyst.net.nz changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #130935|0 |1 is obsolete| | --- Comment #57 from wainuiwitikapark(a)catalyst.net.nz --- Created attachment 131003 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=131003&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: guarantor_search.tt To test, edit a patron record and go through the process of adding a guarantor. In the guarantor search results table the address should be displayed correctly. Signed-off-by: Wainui Witika-Park <wainuiwitikapark(a)catalyst.net.nz> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 22 Feb '22

22 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 wainuiwitikapark(a)catalyst.net.nz changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #130934|0 |1 is obsolete| | --- Comment #56 from wainuiwitikapark(a)catalyst.net.nz --- Created attachment 131002 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=131002&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: catalogue/results.tt To test, perform a search in the catalogue and verify that search term highlighting works correctly. Signed-off-by: Wainui Witika-Park <wainuiwitikapark(a)catalyst.net.nz> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 22 Feb '22

22 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 wainuiwitikapark(a)catalyst.net.nz changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #130933|0 |1 is obsolete| | --- Comment #55 from wainuiwitikapark(a)catalyst.net.nz --- Created attachment 131001 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=131001&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: authorities/blinddetail-biblio-search.tt Test the process of searching for and selecting an authority record for use in the basic MARC editor. Signed-off-by: Wainui Witika-Park <wainuiwitikapark(a)catalyst.net.nz> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 22 Feb '22

22 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 wainuiwitikapark(a)catalyst.net.nz changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #130932|0 |1 is obsolete| | --- Comment #54 from wainuiwitikapark(a)catalyst.net.nz --- Created attachment 131000 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=131000&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: authorities/authorities.tt Check that mandatory tags and subfields are correctly required when editing an authority record. Signed-off-by: Wainui Witika-Park <wainuiwitikapark(a)catalyst.net.nz> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 26102] Javascript injection in intranet search
by bugzilla-daemon＠bugs.koha-community.org 22 Feb '22

22 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=26102 wainuiwitikapark(a)catalyst.net.nz changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #130931|0 |1 is obsolete| | --- Comment #53 from wainuiwitikapark(a)catalyst.net.nz --- Created attachment 130999 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=130999&action=e… Bug 26102: [19.11] Prevent XSS when To.json is used: admin/preferences.tt Test that preference search term highlighting works correctly. Signed-off-by: Wainui Witika-Park <wainuiwitikapark(a)catalyst.net.nz> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 30051] New: Changing AcqCreateItems value impacts baskets set to follow default behavior
by bugzilla-daemon＠bugs.koha-community.org 21 Feb '22

21 Feb '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30051 Bug ID: 30051 Summary: Changing AcqCreateItems value impacts baskets set to follow default behavior Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: andrew(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org When creating a basket in acquisitions, we record the user's choice for item creation in aqbasket.create_items. However, if one sets the basket to follow the default behavior determined in the AcqCreateItems syspref then we leave aqbasket.create_items NULL. This can create issues if the syspref gets changed. For example: - set AcqCreateItems to "placing an order" - create a basket, leaving item creation set to the default - confirm aqbasket.create_items is null - add an order to your basket from a new bib. confirm your bib and 1 item are created. - close your basket - set AcqCreateItems to "receiving an order" - receive your order - confirm receiving the order creates a second item -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 1