[koha-commits] main Koha release repository branch master updated. v18.11.00-1419-g6a0246e

Thu May 2 16:06:41 CEST 2019

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "main Koha release repository".

The branch, master has been updated
       via  6a0246e24838cfba672baf4aef080588b7d091bf (commit)
       via  d9b3b90849fd95d296b73b330c4e32ff018c81a5 (commit)
       via  d5e7dd15fc9c064f99739b27e5b40456b359f420 (commit)
       via  375dd35d5354d46c4c16f534494b123ce370c3f4 (commit)
       via  401e8e791e32008e93e959dd9ed1b4491cb0796a (commit)
       via  3b12416dc8d8f833bc745402ae835cc56c897fef (commit)
       via  f021ca30a5d3944a43b4f6e089b21cfd9dc02997 (commit)
       via  0fb9b9fdb080dfe8c7bccd7f83a9c63bb3c9b104 (commit)
       via  05f22c2159f3edf597d82ff76ea266760a7498cd (commit)
       via  456a7ae6d452a4a805b521f0123c666bb8e84085 (commit)
       via  30de51fa0c707322ce95a318df72ec5d7b5d3eb0 (commit)
      from  76871516050103f986e50034bccadd4b82fcd2d7 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 6a0246e24838cfba672baf4aef080588b7d091bf
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Thu Mar 21 14:45:37 2019 -0300

    Bug 22542: Force back button to display personal data

    This is a follow-up of bug 5371

    The following command must not return anything:
    grep ^output_html_with_http_headers `git grep -l -P "authnotrequired\s*=>\s*0" opac`|grep -v force_no_caching

    This must be a test somehwere to prevent further regressions.

    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>

    Signed-off-by: Nick Clemens <nick at bywatersolutions.com>

commit d9b3b90849fd95d296b73b330c4e32ff018c81a5
Author: Martin Renvoize <martin.renvoize at ptfs-europe.com>
Date:   Mon Apr 29 13:30:09 2019 +0100

    Bug 22478: (QA follow-up) Update tests to check for any script tags

    Signed-off-by: Nick Clemens <nick at bywatersolutions.com>

commit d5e7dd15fc9c064f99739b27e5b40456b359f420
Author: Martin Renvoize <martin.renvoize at ptfs-europe.com>
Date:   Fri Apr 26 19:56:43 2019 +0100

    Bug 22478: (QA follow-up) Make test consistent with variable name

    We were adding data to category 1 (private lists) and testing against
    that, but we named the variable 'publist_lists'.

    Signed-off-by: Martin Renvoize <martin.renvoize at ptfs-europe.com>

    Signed-off-by: Nick Clemens <nick at bywatersolutions.com>

commit 375dd35d5354d46c4c16f534494b123ce370c3f4
Author: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>
Date:   Fri Apr 12 07:02:06 2019 +0000

    Bug 22478: (QA follow-up) Handle category in opac-shelves like a boolean

    The category parameter should be restricted to 1 or 2 (private/public). In
    order to keep same behavior, no parameter means 1 (private).
    Note: Adding the same line in intranet counterpart.

    Test plan
    [1] Check for category empty, '1a', '11' etc. And with script ;)

    Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>

    Signed-off-by: Nick Clemens <nick at bywatersolutions.com>

commit 401e8e791e32008e93e959dd9ed1b4491cb0796a
Author: Katrin Fischer <katrin.fischer.83 at web.de>
Date:   Wed Apr 10 02:06:37 2019 +0000

    Bug 22478: Fix POD

    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>

    Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>

    Signed-off-by: Nick Clemens <nick at bywatersolutions.com>

commit 3b12416dc8d8f833bc745402ae835cc56c897fef
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Fri Mar 15 13:41:27 2019 -0300

    Bug 22478: Add tests

    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>

    Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>

    Signed-off-by: Nick Clemens <nick at bywatersolutions.com>

commit f021ca30a5d3944a43b4f6e089b21cfd9dc02997
Author: Jonathan Druart <jonathan.druart at bugs.koha-community.org>
Date:   Thu Mar 14 19:42:50 2019 -0300

    Bug 22478: Prevent XSS vulnerabilities when pagination appears

    This is a bad one as we thought we were XSS safe since bug 13618.

    The html code generated in C4::Output::pagination_bar must escape the
    variables and values correctly.

    This patch needs to be widely tested, everywhere the pagination appears,
    to make sure we will not introduce regressions.

    Signed-off-by: Katrin Fischer <katrin.fischer.83 at web.de>

    Signed-off-by: Marcel de Rooy <m.de.rooy at rijksmuseum.nl>

    Signed-off-by: Nick Clemens <nick at bywatersolutions.com>

commit 0fb9b9fdb080dfe8c7bccd7f83a9c63bb3c9b104
Author: Martin Renvoize <martin.renvoize at ptfs-europe.com>
Date:   Fri Apr 26 17:24:06 2019 +0100

    Bug 22478: (RMaint follow-up) source t::lib::Mocks

    In 18.11.x the t::lib::Mocks module is not yet sourced for the relevant
    test

    Signed-off-by: Martin Renvoize <martin.renvoize at ptfs-europe.com>

    Signed-off-by: Nick Clemens <nick at bywatersolutions.com>

commit 05f22c2159f3edf597d82ff76ea266760a7498cd
Author: Nick Clemens <nick at bywatersolutions.com>
Date:   Thu May 2 13:40:07 2019 +0000

    Bug 22692: (RM follow-up) Adjust test count

    Signed-off-by: Nick Clemens <nick at bywatersolutions.com>

commit 456a7ae6d452a4a805b521f0123c666bb8e84085
Author: Nick Clemens <nick at bywatersolutions.com>
Date:   Fri Apr 12 01:23:34 2019 +0000

    Bug 22692: Check for patron using cardnumber and userid

    TO test:
    1 - Set failed login attempts to 1
    2 - Attempt a login with a userid and bad password, no success
    3 - Attempt a login with userid and correct password, prevented because
    locked
    4 - Attempt a login with cardnumber and right password, you are logged
    in
    5 - Log out, try again with userid and correct password, prevented
    because locked?
    6 - Apply patch
    7 - Repeat 1-3 to lock account
    8 - Attempt logging in with cardnumber, you are prevented

    Signed-off-by: Martin Renvoize <martin.renvoize at ptfs-europe.com>
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>

    Signed-off-by: Nick Clemens <nick at bywatersolutions.com>

commit 30de51fa0c707322ce95a318df72ec5d7b5d3eb0
Author: Nick Clemens <nick at bywatersolutions.com>
Date:   Fri Apr 12 01:11:19 2019 +0000

    Bug 22692: Unit tests

    1 - Apply just this patch
    2 - prove -v t/db_dependent/Auth.t
    3 - Failure
    4 - Apply second patch
    5 - prove -v t/db_dependent/Auth.t
    6 - Success

    Signed-off-by: Martin Renvoize <martin.renvoize at ptfs-europe.com>
    Signed-off-by: Chris Cormack <chris at bigballofwax.co.nz>

    Signed-off-by: Nick Clemens <nick at bywatersolutions.com>

-----------------------------------------------------------------------

Summary of changes:
 C4/Auth.pm                            |    1 +
 C4/Output.pm                          |    6 +++-
 opac/clubs/clubs-tab.pl               |    2 +-
 opac/clubs/enroll.pl                  |    2 +-
 opac/opac-account-pay.pl              |    2 +-
 opac/opac-addbybiblionumber.pl        |    2 +-
 opac/opac-alert-subscribe.pl          |    2 +-
 opac/opac-illrequests.pl              |    2 +-
 opac/opac-request-article.pl          |    2 +-
 opac/opac-reserve.pl                  |   15 ++++------
 opac/opac-sendbasket.pl               |    4 +--
 opac/opac-sendshelf.pl                |    6 ++--
 opac/opac-shareshelf.pl               |    3 +-
 opac/opac-shelves.pl                  |    1 +
 opac/opac-suggestions.pl              |    2 +-
 opac/svc/auth/googleopenidconnect     |    2 +-
 t/db_dependent/Auth.t                 |   26 ++++++++++++++++-
 t/db_dependent/selenium/regressions.t |   50 ++++++++++++++++++++++++++++++++-
 t/lib/Selenium.pm                     |   35 +++++++++++++++++++++--
 virtualshelves/shelves.pl             |    1 +
 20 files changed, 134 insertions(+), 32 deletions(-)

hooks/post-receive
-- 
main Koha release repository