https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=5920 --- Comment #16 from Andrew Fuerste-Henry <andrewfh@dubcolib.org> --- Martin, can you please provide a test plan? What I've tried doesn't seem to work, but perhaps I'm misunderstanding your intent. Here's what I did: - apply patch - cpan HTML:Restrict - restart_all - create a new report from SQL: "select concat('<h1>','Hello world','</h1>') as message" - run report - click Download, select CSV format - open csv in text editor I expected my CSV to contain "Hello world" without the <hi> tags, but I got: message "<h1>Hello world</h1>" I also tried: SELECT biblionumber, CONCAT('<a href=\"/cgi-bin/koha/catalogue/detail.pl?biblionumber=',biblionumber,'\">',title,'</a>') AS Title from biblio and ended up with a csv containing: biblionumber,Title 12484,"<a href=""/cgi-bin/koha/catalogue/detail.pl?biblionumber=12484"">The mask</a>" -- You are receiving this mail because: You are the QA Contact for the bug. You are watching all bug changes.