- Koha-bugs - lists.koha-community.org

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '26

17 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #195478|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '26

17 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #195477|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '26

17 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #195475|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '26

17 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #195474|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '26

17 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #195503|0 |1 is obsolete| | --- Comment #427 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 195504 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=195504&action=e… Bug 38365: Only require a non-empty nonce in FrameworkPlugin.t Test plan: 0. Apply the patch 1. Run the following: prove t/db_dependent/FrameworkPlugin.t \ t/db_dependent/Koha/Plugins/Valuebuilder_hooks.t \ t/db_dependent/Koha/UI/Form/Builder/Biblio.t \ t/db_dependent/Koha/UI/Form/Builder/Item.t \ t/db_dependent/Serials.t -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '26

17 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #426 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 195503 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=195503&action=e… Bug 38365: Only require a non-empty nonce in FrameworkPlugin.t -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '26

17 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #425 from David Cook <dcook(a)prosentient.com.au> --- (In reply to Jonathan Druart from comment #423) > Regarding the following patches: > Bug 38365: Fix Koha/UI/Form/Builder/Biblio.t > Bug 38365: Fix Koha/UI/Form/Builder/Item.t > Bug 38365: Fix Serials.t > Bug 38365: Fix FrameworkPlugin.t > > I am not sure the fixes are correct. Shouldn't we instead remove the nonce > attribute if it's not set? That will remove the warning. > > Or do we throw an exception? Mmm that's a good point. Technically, we don't *really* need a CSP nonce for most of those tests. We don't have to remove the nonce attribute but we can change Koha/FrameworkPlugin.pm to just set it to blank if it doesn't have a defined value. I think we'd really just need 1 script like FrameworkPlugin.t setting the nonce so that we can prove that it does inject the nonce into the framework plugins. Ok, I'll do something for that now. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42023] New: Sort options missing when creating a list in the OPAC
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '26

17 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42023 Bug ID: 42023 Summary: Sort options missing when creating a list in the OPAC Initiative type: --- Sponsorship --- status: Product: Koha Version: 24.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Lists Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org CC: dcook(a)prosentient.com.au, m.de.rooy(a)rijksmuseum.nl When creating a new list in the OPAC, you are able to pick from a list of sort options that are pre-set when the list is opened. For a little while now we have the option to sort a list by multiple options, including publication date asc and desc. This list offers more options than what you can choose from when creating the list. Also the labelling is better including the information which direction it will be sorted on. It would be great if we could make both option lists match. To recreate: - Add a list to the OPAC - View the list of sorting options on the creation form - Save the list and add a few entries - Look at the list and look at the sorting pull down on top of the list - Confirm options don't match -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 3

[Bug 41550] New: Add Koha::Role object
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '26

17 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41550 Bug ID: 41550 Summary: Add Koha::Role object Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: lisette(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org For RBAC -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 15

[Bug 42114] New: Remove references to Bookings in Circulation and fine rules when EnableBooking is set to Disable
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42114 Bug ID: 42114 Summary: Remove references to Bookings in Circulation and fine rules when EnableBooking is set to Disable Initiative type: --- Sponsorship --- status: Product: Koha Version: 25.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: System Administration Assignee: koha-bugs(a)lists.koha-community.org Reporter: catrina(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Bug 37661 introduced the ability to disable/enable the Bookings module. With EnableBooking set to Disable, the Circulation and fine rules (cgi-bin/koha/admin/smart-rules.pl) “Default checkout, hold and return policy” and “Default holds and bookings policies by item type” display columns for Booking pre-processing (days) and Booking post-processing (days). These references should be removed when the system preference is set to Disable. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0