https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14962 --- Comment #108 from Martin Renvoize (ashimema) <martin.renvoize@openfifth.co.uk> --- Created attachment 194309 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=194309&action=edit Bug 14962: (QA follow-up) Filter inactive display items from public API The public list_public endpoint in Koha::REST::V1::DisplayItems was returning every display_items row with no filtering. Unauthenticated OPAC users could enumerate items from disabled, expired, or future displays. Apply the same active-display criteria used elsewhere in the feature: parent display must be enabled and within its start/end date range, and the individual item's date_remove must not have passed. Sponsored-by: ByWater Solutions Signed-of-by: Martin Renvoize <martin.renvoize@openfifth.co.uk> -- You are receiving this mail because: You are watching all bug changes.