- Koha-bugs - lists.koha-community.org

[Bug 22268] New: Data displayed in request list datatable is not sanitized
by bugzilla-daemon＠bugs.koha-community.org 01 May '19

01 May '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22268 Bug ID: 22268 Summary: Data displayed in request list datatable is not sanitized Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: ILL Assignee: koha-bugs(a)lists.koha-community.org Reporter: andrew.isherwood(a)ptfs-europe.com Target Milestone: --- Request data displayed in the "Request view" or similar views is sanitized by the html filter in the template. However, the main request list table is generated via Datatables and is not sanitized. This can be demonstrated by entering a malicious string, such as: <script>alert('pwned');</script> Into the request notes field, then displaying the requests table. I've not yet investigated if column data that is generated via render functions is affected, or whether it's just the columns that are passed through by Datatables. Investigate how this has been addressed elsewhere in Koha. Also, possible mitigations can be seen here: https://datatables.net/manual/security -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 8

[Bug 15136] Display item's homebranch in patron's fines list
by bugzilla-daemon＠bugs.koha-community.org 30 Apr '19

30 Apr '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15136 Lisette Scheer <lisetteslatah(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=22815 -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 22766] New: Tag cloud link in OPAC does not work
by bugzilla-daemon＠bugs.koha-community.org 30 Apr '19

30 Apr '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22766 Bug ID: 22766 Summary: Tag cloud link in OPAC does not work Change sponsored?: --- Product: Koha Version: 18.11 Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: costalc(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Target Milestone: --- Tags cloud link in OPAC does not work when tries to show tags from other users. See PDF attached please. -- You are receiving this mail because: You are watching all bug changes.

1 8

[Bug 5770] Email librarian when purchase suggestion made
by bugzilla-daemon＠bugs.koha-community.org 30 Apr '19

30 Apr '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5770 --- Comment #27 from Liz Rea <wizzyrea(a)gmail.com> --- Created attachment 89147 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=89147&action=ed… Bug 5770: Notify for new suggestion - sample notices Signed-off-by: Liz Rea <wizzyrea(a)gmail.com> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 5770] Email librarian when purchase suggestion made
by bugzilla-daemon＠bugs.koha-community.org 30 Apr '19

30 Apr '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5770 --- Comment #26 from Liz Rea <wizzyrea(a)gmail.com> --- Created attachment 89146 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=89146&action=ed… Bug 5770: Unit test Signed-off-by: Liz Rea <wizzyrea(a)gmail.com> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 5770] Email librarian when purchase suggestion made
by bugzilla-daemon＠bugs.koha-community.org 30 Apr '19

30 Apr '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5770 --- Comment #25 from Liz Rea <wizzyrea(a)gmail.com> --- Created attachment 89145 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=89145&action=ed… Bug 5770: New system pref for new suggestion email Signed-off-by: Liz Rea <wizzyrea(a)gmail.com> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 5770] Email librarian when purchase suggestion made
by bugzilla-daemon＠bugs.koha-community.org 30 Apr '19

30 Apr '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5770 Liz Rea <wizzyrea(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #89139|0 |1 is obsolete| | Attachment #89140|0 |1 is obsolete| | Attachment #89141|0 |1 is obsolete| | Attachment #89142|0 |1 is obsolete| | --- Comment #24 from Liz Rea <wizzyrea(a)gmail.com> --- Created attachment 89144 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=89144&action=ed… Bug 5770: Email librarian when purchase suggestion made Signed-off-by: Liz Rea <wizzyrea(a)gmail.com> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 5770] Email librarian when purchase suggestion made
by bugzilla-daemon＠bugs.koha-community.org 30 Apr '19

30 Apr '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5770 --- Comment #23 from Devinim <kohadevinim(a)devinim.com.tr> --- Created attachment 89142 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=89142&action=ed… Bug 5770: Notify for new suggestion - sample notices -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 5770] Email librarian when purchase suggestion made
by bugzilla-daemon＠bugs.koha-community.org 30 Apr '19

30 Apr '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5770 Devinim <kohadevinim(a)devinim.com.tr> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Patch doesn't apply |Signed Off -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 5770] Email librarian when purchase suggestion made
by bugzilla-daemon＠bugs.koha-community.org 30 Apr '19

30 Apr '19

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5770 --- Comment #22 from Devinim <kohadevinim(a)devinim.com.tr> --- Created attachment 89141 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=89141&action=ed… Bug 5770: Unit test -- You are receiving this mail because: You are watching all bug changes.

1 0