[Bug 17045] New: Write API to Allow instant use of reports library
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17045 Bug ID: 17045 Summary: Write API to Allow instant use of reports library Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Reports Assignee: gmcharlt@gmail.com Reporter: lisetteslatah@gmail.com QA Contact: testopia@bugs.koha-community.org Write an API that would allow us to select and run reports directly from the Koha Community Reports Library, as discussed at Koha US Conference 2016 during the reports Round table. -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17045 Lisette <lisetteslatah@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lisetteslatah@gmail.com -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17045 Chris Cormack <chris@bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |chris@bigballofwax.co.nz --- Comment #1 from Chris Cormack <chris@bigballofwax.co.nz> --- I think doing something with mana that biblibre is working on is a much better idea. Running stuff directly from a wiki that anyone can edit, is a hugely insecure idea. SELECT biblionumber, CONCAT('<script>alert\(\"',title,'\"\)</script>') AS Title FROM biblio ORDER BY biblionumber Is a safe but annoying one, it could easily be changed to run some much more dangerous js, or dump the persons sessionid etc. I would hope people are reading the sql they are cutting and pasting. -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17045 Magnus Enger <magnus@libriotech.no> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |magnus@libriotech.no --- Comment #2 from Magnus Enger <magnus@libriotech.no> --- (In reply to Chris Cormack from comment #1)
I think doing something with mana that biblibre is working on is a much better idea.
Agreed, this sounds like a good fit for Mana - see bug 17047 -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17045 Magnus Enger <magnus@libriotech.no> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://bugs.koha-community | |.org/bugzilla3/show_bug.cgi | |?id=17047 -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17045 Lisette Scheer <lisetteslatah@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |DUPLICATE Status|NEW |RESOLVED --- Comment #3 from Lisette Scheer <lisetteslatah@gmail.com> --- Agreed that Mana does what was disscussed at that round table. I'm marking resolved duplicate. Lisette *** This bug has been marked as a duplicate of bug 17047 *** -- You are receiving this mail because: You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=17045 Katrin Fischer <katrin.fischer@bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |katrin.fischer@bsz-bw.de --- Comment #4 from Katrin Fischer <katrin.fischer@bsz-bw.de> --- (In reply to Lisette Scheer from comment #3)
Agreed that Mana does what was disscussed at that round table. I'm marking resolved duplicate. Lisette
*** This bug has been marked as a duplicate of bug 17047 ***
Thx for the bug clean-up Lisette! :) -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org