- Koha-bugs - lists.koha-community.org

[Bug 40525] CSV formula injection - client side (DataTables) in OPAC
by bugzilla-daemon＠bugs.koha-community.org 16 Jul '26

16 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40525 Caroline Cyr La Rose <caroline.cyr-la-rose(a)inlibro.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs documenting |RESOLVED Resolution|--- |FIXED --- Comment #30 from Caroline Cyr La Rose <caroline.cyr-la-rose(a)inlibro.com> --- Nothing to add or edit in the Koha manual regarding this bug fix. Please reopen and provide more information if this is not the case. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 40030] HTML should be escaped when viewing system preferences diff in Log viewer
by bugzilla-daemon＠bugs.koha-community.org 16 Jul '26

16 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40030 Caroline Cyr La Rose <caroline.cyr-la-rose(a)inlibro.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|Needs documenting |RESOLVED --- Comment #17 from Caroline Cyr La Rose <caroline.cyr-la-rose(a)inlibro.com> --- Nothing to add or edit in the Koha manual regarding this change. Please reopen and provide more information if this is not the case. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 41701] New: Fix definition of OAI-PMH:DeletedRecord preferences in sysprefs.sql
by bugzilla-daemon＠bugs.koha-community.org 16 Jul '26

16 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41701 Bug ID: 41701 Summary: Fix definition of OAI-PMH:DeletedRecord preferences in sysprefs.sql Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: oleonard(a)myacpl.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org The definition of OAI-PMH:DeletedRecord in sysprefs.sql has the the options and explanation columns swapped -- You are receiving this mail because: You are watching all bug changes.

1 15

[Bug 41530] New: item_type vs item_type_id inconsistencies in the API
by bugzilla-daemon＠bugs.koha-community.org 16 Jul '26

16 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41530 Bug ID: 41530 Summary: item_type vs item_type_id inconsistencies in the API Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: martin.renvoize(a)openfifth.co.uk QA Contact: testopia(a)bugs.koha-community.org CC: tomascohen(a)gmail.com Bug 41456 highlighted a few inconsistencies in the item_type field naming in the API's. I spotted that boh transfer_limit endpoints are using item_type string/null where I believe it should be item_type_id string/null.. it's should only be item_type if it's an object/null. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 16

[Bug 42040] New: Patron autocomplete broken in 25.05.x
by bugzilla-daemon＠bugs.koha-community.org 16 Jul '26

16 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42040 Bug ID: 42040 Summary: Patron autocomplete broken in 25.05.x Initiative type: --- Sponsorship --- status: Product: Koha Version: 25.05 Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: lucas(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle(a)bywatersolutions.com In 25.05.x: 1. Make sure patron autocomplete is on. ( PatronAutoComplete ) 2. In KTD type a few characters like 'Edn'. 3. Nothing ever completes 4. Uncaught ReferenceError: $patron_to_html is not defined -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 6

[Bug 40245] New: Support option to display firstname in memberresultst
by bugzilla-daemon＠bugs.koha-community.org 16 Jul '26

16 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40245 Bug ID: 40245 Summary: Support option to display firstname in memberresultst Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: koha-bugs(a)lists.koha-community.org Reporter: Chip.Halvorsen(a)WestlakeLibrary.org QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com Circulation staff would find it very useful to see firstname in addition to preferred_name in the patron search results table (memberresultst). Currently at 24.11+, only the preferred name is displayed. One way to handle this might be to add firstname as a line at between address and email address. SMITH, KAT 123 MAIN ST. ANYTOWN, STATE/PROVINCE POSTCODE Firstname: KATELYNN Email: X(a)Y.Z Or we might want to put the firstname in parenthesis. SMITH, KAT (Firstname: KATELYNN) 123 MAIN ST. ANYTOWN, STATE/PROVINCE POSTCODE Email: X(a)Y.Z Having the firstname appear somewhere would help disambiguate similar patron names in the search results. Even better would be logic that only displayed the Firstname when it differs from the Preferred_name. This should be made optional. Some libraries might not want firstname to appear here, to avoid accidentally deadnaming a patron. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 62

[Bug 40995] New: Patron search autocomplete adds extraneous spacing and punctuation when patron lacks surname
by bugzilla-daemon＠bugs.koha-community.org 16 Jul '26

16 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40995 Bug ID: 40995 Summary: Patron search autocomplete adds extraneous spacing and punctuation when patron lacks surname Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: andrew(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org If your autocomplete results include a patron without a surname, Koha still puts a comma and space between the first name and the nonexistent surname, like ", Henry." -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 30

[Bug 32887] New: OpacLibraryInfo needs to be pre-selected when OPAC info is added for a library
by bugzilla-daemon＠bugs.koha-community.org 16 Jul '26

16 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32887 Bug ID: 32887 Summary: OpacLibraryInfo needs to be pre-selected when OPAC info is added for a library Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Staff interface Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com To test: * Go to administration > libraries * Edit a library * Verify there is a link "Add HTML content" * Click it * On the HTML customizations form, verify that the location pull down is not correctly set to OpacLibraryInfo. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 5

[Bug 42224] (Bug 40524 follow-up) [24.11.x] Fix XSS in columns_settings.inc
by bugzilla-daemon＠bugs.koha-community.org 16 Jul '26

16 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42224 Bug 42224 depends on bug 40524, which changed state. Bug 40524 Summary: Stored XSS run by DataTables Print button in staff interface https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40524 What |Removed |Added ---------------------------------------------------------------------------- Status|Needs documenting |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 40524] Stored XSS run by DataTables Print button in staff interface
by bugzilla-daemon＠bugs.koha-community.org 16 Jul '26

16 Jul '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40524 Caroline Cyr La Rose <caroline.cyr-la-rose(a)inlibro.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs documenting |RESOLVED Resolution|--- |FIXED --- Comment #29 from Caroline Cyr La Rose <caroline.cyr-la-rose(a)inlibro.com> --- Nothing to add or edit in the Koha manual regarding this change. Please reopen and provide more information if this is not the case. -- You are receiving this mail because: You are watching all bug changes.

1 0