- Koha-bugs - lists.koha-community.org

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '26

17 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #195474|0 |1 is obsolete| | -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '26

17 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #195503|0 |1 is obsolete| | --- Comment #427 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 195504 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=195504&action=e… Bug 38365: Only require a non-empty nonce in FrameworkPlugin.t Test plan: 0. Apply the patch 1. Run the following: prove t/db_dependent/FrameworkPlugin.t \ t/db_dependent/Koha/Plugins/Valuebuilder_hooks.t \ t/db_dependent/Koha/UI/Form/Builder/Biblio.t \ t/db_dependent/Koha/UI/Form/Builder/Item.t \ t/db_dependent/Serials.t -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '26

17 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #426 from David Cook <dcook(a)prosentient.com.au> --- Created attachment 195503 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=195503&action=e… Bug 38365: Only require a non-empty nonce in FrameworkPlugin.t -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 38365] Add Content-Security-Policy HTTP header to HTML responses
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38365 --- Comment #425 from David Cook <dcook(a)prosentient.com.au> --- (In reply to Jonathan Druart from comment #423) > Regarding the following patches: > Bug 38365: Fix Koha/UI/Form/Builder/Biblio.t > Bug 38365: Fix Koha/UI/Form/Builder/Item.t > Bug 38365: Fix Serials.t > Bug 38365: Fix FrameworkPlugin.t > > I am not sure the fixes are correct. Shouldn't we instead remove the nonce > attribute if it's not set? That will remove the warning. > > Or do we throw an exception? Mmm that's a good point. Technically, we don't *really* need a CSP nonce for most of those tests. We don't have to remove the nonce attribute but we can change Koha/FrameworkPlugin.pm to just set it to blank if it doesn't have a defined value. I think we'd really just need 1 script like FrameworkPlugin.t setting the nonce so that we can prove that it does inject the nonce into the framework plugins. Ok, I'll do something for that now. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42023] New: Sort options missing when creating a list in the OPAC
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42023 Bug ID: 42023 Summary: Sort options missing when creating a list in the OPAC Initiative type: --- Sponsorship --- status: Product: Koha Version: 24.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Lists Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org CC: dcook(a)prosentient.com.au, m.de.rooy(a)rijksmuseum.nl When creating a new list in the OPAC, you are able to pick from a list of sort options that are pre-set when the list is opened. For a little while now we have the option to sort a list by multiple options, including publication date asc and desc. This list offers more options than what you can choose from when creating the list. Also the labelling is better including the information which direction it will be sorted on. It would be great if we could make both option lists match. To recreate: - Add a list to the OPAC - View the list of sorting options on the creation form - Save the list and add a few entries - Look at the list and look at the sorting pull down on top of the list - Confirm options don't match -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 3

[Bug 41550] New: Add Koha::Role object
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41550 Bug ID: 41550 Summary: Add Koha::Role object Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: lisette(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org For RBAC -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 15

[Bug 42114] New: Remove references to Bookings in Circulation and fine rules when EnableBooking is set to Disable
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42114 Bug ID: 42114 Summary: Remove references to Bookings in Circulation and fine rules when EnableBooking is set to Disable Initiative type: --- Sponsorship --- status: Product: Koha Version: 25.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: System Administration Assignee: koha-bugs(a)lists.koha-community.org Reporter: catrina(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Bug 37661 introduced the ability to disable/enable the Bookings module. With EnableBooking set to Disable, the Circulation and fine rules (cgi-bin/koha/admin/smart-rules.pl) “Default checkout, hold and return policy” and “Default holds and bookings policies by item type” display columns for Booking pre-processing (days) and Booking post-processing (days). These references should be removed when the system preference is set to Disable. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 42095] New: UNIMARC: Cataloging plugin unimarc_field_4XX.pl broken after Bug 34478 (op-cud)
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42095 Bug ID: 42095 Summary: UNIMARC: Cataloging plugin unimarc_field_4XX.pl broken after Bug 34478 (op-cud) Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: synapse.ova(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl The UNIMARC cataloging plugin unimarc_field_4XX.pl no longer performs searches after the implementation of CSRF protection changes in Bug 34478. The template unimarc_field_4XX.tt was updated to use op=cud-do_search to comply with the new security requirements, but the corresponding Perl script unimarc_field_4XX.pl was not updated to handle the cud- prefix or the renamed parameter. As a result, when a user clicks the "Search" button in the plugin popup, the script fails to recognize the operation and doesn't return any results. This issue specifically affects UNIMARC installations. Steps to reproduce: Use a Koha instance configured for UNIMARC. Go to Cataloging -> Add MARC record. Locate a 4XX field (e.g., 410, 411, 461) and click the plugin button (...) to open the search popup. Enter any search term (e.g., a title or author) and click "Search". Observe that the page simply reloads or shows the search form again without any results, despite matches existing in the database. Check the logic in cataloguing/value_builder/unimarc_field_4XX.pl: it likely checks for if ($op eq 'do_search'), which is now never true because the value passed is cud-do_search. Actual results: The plugin stays on the search form and does not execute the search logic. Expected results: The plugin should execute the search and display the list of records to link. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 6

[Bug 23919] New: Make ISSN searchable with and without hyphen
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=23919 Bug ID: 23919 Summary: Make ISSN searchable with and without hyphen Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Searching Assignee: koha-bugs(a)lists.koha-community.org Reporter: katrin.fischer(a)bsz-bw.de QA Contact: testopia(a)bugs.koha-community.org For the ISBN we have the option to activate search with and without hyphens - but this doesn't work for ISSN. We shoudl make it work there as well. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 56

[Bug 41745] New: syspref's types need cleaning
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '26

16 Mar '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41745 Bug ID: 41745 Summary: syspref's types need cleaning Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: jonathan.druart(a)gmail.com Reporter: jonathan.druart(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Depends on: 41682 Clean 'type' and make it an ENUM > select distinct type from systempreferences; +-------------------+ | type | +-------------------+ | textarea | | Free | | YesNo | | Choice | | Integer | | | | multiple | | ill-backends | | ClassSources | | NULL | | File | | multiple_sortable | | Themes | | Languages | | Short | +-------------------+ NULL, File, Short and empty string are not valid types. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41682 [Bug 41682] Syspref discrepancies between new and upgraded installs -- You are receiving this mail because: You are watching all bug changes.

1 4