Back to bug 37573

Who When What Removed Added
schodkowy.omegi-0r 2024-08-06 10:34:53 UTC See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9504
schodkowy.omegi-0r 2024-08-06 13:05:06 UTC Patch complexity --- Trivial patch
CC januszop, roman.dolny
Status NEW Needs Signoff
oleonard 2024-08-14 13:15:47 UTC Assignee oleonard schodkowy.omegi-0r
david 2024-08-17 19:57:00 UTC CC david
dcook 2024-08-19 02:14:42 UTC See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36805
CC dcook
schodkowy.omegi-0r 2024-08-20 06:47:20 UTC Text to go in the release notes This fixes the inability to use JavaScript inside of <script> tags in OPACSearchForTitleIn preference (the code was unexpectedly butchered, causing syntax errors)
magnus 2024-10-31 09:14:22 UTC Patch complexity Trivial patch Small patch
Status Needs Signoff Signed Off
magnus 2024-10-31 09:14:25 UTC Attachment #170094 Attachment is obsolete 0 1
dcook 2024-11-01 00:31:10 UTC Status Signed Off Failed QA
dcook 2024-11-01 00:36:16 UTC See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38321
dcook 2024-11-01 02:09:51 UTC Status Failed QA Signed Off
Text to go in the release notes This fixes the inability to use JavaScript inside of <script> tags in OPACSearchForTitleIn preference (the code was unexpectedly butchered, causing syntax errors) Restrict the removal of {} tokens in OPACSearchForTitleIn preference to only underscores and alphanumeric to stop unintended removal of other data including {} characters.
Summary Bad escaping in OPACSearchForTitleIn breaks JS in <script> tags Restrict OPACSearchForTitleIn token removal to underscore and alphanumeric
m.de.rooy 2024-11-15 08:25:57 UTC Status Signed Off Failed QA
CC m.de.rooy
m.de.rooy 2024-11-15 08:26:07 UTC QA Contact testopia m.de.rooy

Back to bug 37573