Back to bug 37573
Who | When | What | Removed | Added |
---|---|---|---|---|
schodkowy.omegi-0r | 2024-08-06 10:34:53 UTC | See Also | https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=9504 | |
schodkowy.omegi-0r | 2024-08-06 13:05:06 UTC | Patch complexity | --- | Trivial patch |
CC | januszop, roman.dolny | |||
Status | NEW | Needs Signoff | ||
oleonard | 2024-08-14 13:15:47 UTC | Assignee | oleonard | schodkowy.omegi-0r |
david | 2024-08-17 19:57:00 UTC | CC | david | |
dcook | 2024-08-19 02:14:42 UTC | See Also | https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36805 | |
CC | dcook | |||
schodkowy.omegi-0r | 2024-08-20 06:47:20 UTC | Text to go in the release notes | This fixes the inability to use JavaScript inside of <script> tags in OPACSearchForTitleIn preference (the code was unexpectedly butchered, causing syntax errors) | |
magnus | 2024-10-31 09:14:22 UTC | Patch complexity | Trivial patch | Small patch |
Status | Needs Signoff | Signed Off | ||
magnus | 2024-10-31 09:14:25 UTC | Attachment #170094 Attachment is obsolete | 0 | 1 |
dcook | 2024-11-01 00:31:10 UTC | Status | Signed Off | Failed QA |
dcook | 2024-11-01 00:36:16 UTC | See Also | https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38321 | |
dcook | 2024-11-01 02:09:51 UTC | Status | Failed QA | Signed Off |
Text to go in the release notes | This fixes the inability to use JavaScript inside of <script> tags in OPACSearchForTitleIn preference (the code was unexpectedly butchered, causing syntax errors) | Restrict the removal of {} tokens in OPACSearchForTitleIn preference to only underscores and alphanumeric to stop unintended removal of other data including {} characters. | ||
Summary | Bad escaping in OPACSearchForTitleIn breaks JS in <script> tags | Restrict OPACSearchForTitleIn token removal to underscore and alphanumeric | ||
m.de.rooy | 2024-11-15 08:25:57 UTC | Status | Signed Off | Failed QA |
CC | m.de.rooy | |||
m.de.rooy | 2024-11-15 08:26:07 UTC | QA Contact | testopia | m.de.rooy |
Back to bug 37573