- Koha-bugs - lists.koha-community.org

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Lari Taskula <lari.taskula(a)hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193311|0 |1 is obsolete| | --- Comment #199 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193710 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193710&action=e… Bug 38365: Move default Content-Security-Policy value into Perl module By defining a default policy in the Perl module, we can easily update it over time. Using koha-conf.xml will just be for overrides, so people can manage their own there. Signed-off-by: Lari Taskula <lari.taskula(a)hypernova.fi> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Lari Taskula <lari.taskula(a)hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193310|0 |1 is obsolete| | --- Comment #198 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193709 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193709&action=e… Bug 38365: Disable the endpoint when CSP is disabled in KOHA_CONF To test: 1. prove t/db_dependent/api/v1/public/csp_reports.t -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Lari Taskula <lari.taskula(a)hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193309|0 |1 is obsolete| | --- Comment #197 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193708 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193708&action=e… Bug 38365: (QA follow-up) Fix param sample indentation -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Lari Taskula <lari.taskula(a)hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193308|0 |1 is obsolete| | --- Comment #196 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193707 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193707&action=e… Bug 38365: Restore violated-directive The violated-directive is a historic name for the effective-directive field and contains the same value. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Lari Taskula <lari.taskula(a)hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193307|0 |1 is obsolete| | --- Comment #195 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193706 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193706&action=e… Bug 38365: (follow-up) Add support for both CSP report syntaxes This patch fixes failing tests from the previous patch and adds more tests that cover multiple violation reports in one POST request. To test: 1. prove t/db_dependent/api/v1/public/csp_reports.t -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Lari Taskula <lari.taskula(a)hypernova.fi> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #193306|0 |1 is obsolete| | --- Comment #194 from Lari Taskula <lari.taskula(a)hypernova.fi> --- Created attachment 193705 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=193705&action=e… Bug 38365: Add support for both CSP report syntaxes Signed-off-by: Lari Taskula <lari.taskula(a)hypernova.fi> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 22459] New: Shibboleth create/sync: Allow mapping of extended patron attributes
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=22459 Bug ID: 22459 Summary: Shibboleth create/sync: Allow mapping of extended patron attributes Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Authentication Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org CC: dpavlin(a)rot13.org Depends on: 18507 Target Milestone: --- It woudl be great if extended patron attributes could be mapped for provisioning with Shibboleth as well. One use case would be a unique key, that is also used/neded for patron imports and stored in an unique extended patron attribute. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18507 [Bug 18507] Shibboleth auto-provisioning - Sync -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 2

[Bug 38519] New: Improve contrast of Bootstrap alerts and text background classes
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38519 Bug ID: 38519 Summary: Improve contrast of Bootstrap alerts and text background classes Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Templates Assignee: oleonard(a)myacpl.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org Depends on: 35402 Created attachment 174934 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=174934&action=e… Screenshot showing examples of Bootstrap alerts and text with background Some of the built-in Bootstrap alert and text background classes aren't working very well in terms of visibility and contrast. The "info" alert should stand out more, and the text background classes don't all have usable contrast. See the attached screenshot. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35402 [Bug 35402] Update the OPAC and staff interface to Bootstrap 5 -- You are receiving this mail because: You are watching all bug changes.

1 29

[Bug 38679] New: GET /deleted/biblios missing some mappings
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38679 Bug ID: 38679 Summary: GET /deleted/biblios missing some mappings Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: tomascohen(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: tomascohen(a)gmail.com When we implemented the `GET /deleted/biblios` endpoint, we missing the mapping for the `biblioitems` table attributes. To reproduce: 1. Pick a sample record ID 2. Fetch is using the API with your favourite tool: GET /api/v1/biblios/<the ID> Accept: application/json 3. Save the output for later 4. Delete the record 5. Fetch the deleted biblio using the API: GET /api/v1/deleted/biblios/<the ID> Accept: application/json 6. Compare the results => FAIL: Attributes like `volumedate` are not mapped! -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 20

[Bug 38735] New: New installations should include preferred_name in DefaultPatronSearchFields by default
by bugzilla-daemon＠bugs.koha-community.org 24 Feb '26

24 Feb '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38735 Bug ID: 38735 Summary: New installations should include preferred_name in DefaultPatronSearchFields by default Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Patrons Assignee: emily.lamancusa(a)montgomerycountymd.gov Reporter: emily.lamancusa(a)montgomerycountymd.gov QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com Depends on: 28633 In bug 28633, preferred_name was added to DefaultPatronSearchFields if the preference already included firstname in the selected values. This should be the case for new installations as well. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28633 [Bug 28633] Add a preferred name field to patrons -- You are receiving this mail because: You are watching all bug changes.

1 14