- Koha-bugs - lists.koha-community.org

[Bug 8937] Translation process removes CDATA in RSS XML
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8937 Hammat wele <hammat.wele(a)inlibro.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|koha-bugs(a)lists.koha-commun |hammat.wele(a)inlibro.com |ity.org | -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 8937] Translation process removes CDATA in RSS XML
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=8937 Hammat wele <hammat.wele(a)inlibro.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |caroline.cyr-la-rose@inlibr | |o.com, | |hammat.wele(a)inlibro.com, | |philippe.blouin(a)inlibro.com -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 24393] New: Remove event attributes from patron clubs list template
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24393 Bug ID: 24393 Summary: Remove event attributes from patron clubs list template Change sponsored?: --- Product: Koha Version: master Hardware: All URL: /cgi-bin/koha/clubs/clubs.pl OS: All Status: ASSIGNED Severity: normal Priority: P5 - low Component: Templates Assignee: oleonard(a)myacpl.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org CC: testopia(a)bugs.koha-community.org Depends on: 18530 The template for the main list of patron clubs has some instances of "onclick," in violation of coding guidelines. https://wiki.koha-community.org/wiki/Coding_Guidelines#JS9:_Avoid_the_use_o… They should be removed in favor of defining events in JavaScript instead of markup. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18530 [Bug 18530] Remove event attributes from patron clubs templates -- You are receiving this mail because: You are watching all bug changes.

1 12

[Bug 33948] New: Replace GetAllIssues with Koha::Checkouts - staff
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33948 Bug ID: 33948 Summary: Replace GetAllIssues with Koha::Checkouts - staff Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: ASSIGNED Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: jonathan.druart+koha(a)gmail.com Reporter: jonathan.druart+koha(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Blocks: 33947 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=33947 [Bug 33947] Move GetAllIssues to Koha -- You are receiving this mail because: You are watching all bug changes.

1 24

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #322 from Jonathan Druart <jonathan.druart(a)gmail.com> --- (In reply to David Cook from comment #271) > (In reply to Jonathan Druart from comment #265) > > (In reply to David Cook from comment #258) > > > (In reply to Jonathan Druart from comment #253) > > > > > > 7. When enabled, I see an error in the browser's console: > > > > > > Content-Security-Policy: The page’s settings blocked the loading of a > > > > > > resource (media-src) at data: because it violates the following directive: > > > > > > “default-src 'self'” > > > > > > > > > > That's interesting. I'd like to hear more about this one. Were there > > > > > additional details? I wonder if it had to do with audio when doing a > > > > > checkout or something? > > > > > > > > No idea! There is nothing else! Don't you see it? > > > > > > Nope! I haven't been able to find it. I don't see it anywhere. Does it > > > happen on a particular page? > > > > All pages: https://snipboard.io/if28Qu.jpg > > Yeah, I don't see that on mine: https://snipboard.io/GSboJW.jpg > > media-src is for <audio> and <video> elements, also even that violation > message looks weird, although I see other people talking about it online. Do > you have any browser plugins/extensions? I think something in your browser > is injecting audio/video into your pages. Indeed, it's NoScript! (even if disabled for the site) -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #321 from Jonathan Druart <jonathan.druart(a)gmail.com> --- (In reply to David Cook from comment #273) > Hmm... I looked at adding an exclusion but not sure how we do it. If we > change Koha::Devel::Files->ls_tt_files to exclude that test template, won't > we be excluding it from other scripts perhaps should include it? > > It would be good to be able to provide runtime exceptions to ls_tt_files() > and friends. > > What do you think, Jonathan? Yep, see the last patch ("Add test_valuebuilder_popup.tt to the exception list"), it's how we add exception to Koha::Devel::Files. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #320 from Jonathan Druart <jonathan.druart(a)gmail.com> --- Created attachment 194622 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194622&action=e… Bug 38365: Add test_valuebuilder_popup.tt to the exception list Patch from commit 5ceefaa -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42008] New: Add information about serial to system log
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42008 Bug ID: 42008 Summary: Add information about serial to system log Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Serials Assignee: koha-bugs(a)lists.koha-community.org Reporter: hagud(a)orex.es QA Contact: testopia(a)bugs.koha-community.org Currently many actions in Koha generate entries in the action_logs table (circulation, cataloguing, patrons, etc.), allowing libraries to audit staff activity. However, actions related to serials receiving are not logged. When a serial issue is received through the Serials module, there is no entry in action_logs, which makes it difficult to audit who performed the action and when. This can be problematic for libraries that need traceability for serials check-in workflows. I propose adding action_logs entries when the following actions occur in the Serials module: Receiving a serial issue Undo receiving an issue (if applicable) Possibly editing or deleting a received issue The log entry should include the staff user who performed the action, consistent with other modules. This enhancement would improve auditing capabilities and bring the Serials module in line with other Koha modules that already log staff actions. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #319 from David Cook <dcook(a)prosentient.com.au> --- (In reply to David Cook from comment #276) > I was thinking more about Jonathan's problem... and I suspect that there's > probably some ancestors that might only live in Lari and my git repos at > this point, so I just tried applying everything on a different git repo and > sure enough... so I'll try to rebase all that... Yep, after a rebase and reupload, it's all good now. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 06 Mar '26

06 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #194567|0 |1 is obsolete| | --- Comment #318 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 194610 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194610&action=e… Bug 38365: Add CSP nonces to all inline script and style tags -- You are receiving this mail because: You are watching all bug changes.

1 0