Bugzilla – Dependency tree for
Bug 14412
SQL Injection in OPAC Interface
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
Max Depth:
Bug 14412
does not depend on any bugs.
Bug 14412
blocks 84 bugs:
view as bug list
14412:
SQL Injection in OPAC Interface
[CLOSED FIXED; assigned to oleonard]
13618:
Add additional template filter methods and a filter presence test to Koha
[CLOSED FIXED; assigned to jonathan.druart]
14744:
Cannot select guarantor when quote in one of the fields
[RESOLVED DUPLICATE; assigned to philippe.blouin]
15717:
Installer: Step 3 has HTML tag br showing
[CLOSED FIXED; assigned to mtompset]
15733:
Audio Alerts issues in master
[RESOLVED DUPLICATE; assigned to kyle]
15734:
Audio Alerts broken
[CLOSED FIXED; assigned to jonathan.druart]
15733:
Audio Alerts issues in master
[RESOLVED DUPLICATE; assigned to kyle]
(*)
15754:
html tags displayed when editing frameworks
[CLOSED INVALID; assigned to jonathan.druart]
15771:
CGI::escapeHTML should not be used anymore
[RESOLVED DUPLICATE; assigned to jonathan.druart]
20975:
Improve auto escaping performance
[CLOSED WONTFIX; assigned to jonathan.druart]
21257:
Patrons checkout table throws JS error when location/collection not defined
[CLOSED FIXED; assigned to jonathan.druart]
21293:
Display of housebound delivery information broken by Bug 13618
[CLOSED FIXED; assigned to oleonard]
21347:
bad code for input field in item information tab of addorderiso2709 page
[CLOSED FIXED; assigned to chris]
21377:
Variable declarations erroneously filtered
[CLOSED FIXED; assigned to bugzilla]
21393:
Make template filter checks code reusable
[CLOSED FIXED; assigned to jonathan.druart]
21731:
t::lib::QA::TemplateFilters missing built-in TT filter "xml" causes false warnings
[Failed QA; assigned to dcook]
21454:
Price filtered variables should not need to be html filtered
[CLOSED FIXED; assigned to jonathan.druart]
21770:
t::lib::QA::TemplateFilters should allow html_entity in href
[CLOSED FIXED; assigned to jonathan.druart]
21418:
Incorrectly filtered markup in staff client lists
[CLOSED FIXED; assigned to oleonard]
21454:
Price filtered variables should not need to be html filtered
[CLOSED FIXED; assigned to jonathan.druart]
(*)
21476:
Incorrect filter prevents HTML5 media from playing in the OPAC
[CLOSED FIXED; assigned to nick]
20783:
Cannot embed some YouTube videos due to 403 errors
[CLOSED FIXED; assigned to jonathan.druart]
21526:
TT variables used to build a link should be uri filtered
[CLOSED FIXED; assigned to jonathan.druart]
22223:
Item url double-encode when parameter is an encoded URL
[Pushed to main; assigned to dcook]
21706:
Editing subfields in authority frameworks is broken (TT filter)
[CLOSED FIXED; assigned to tomascohen]
21878:
Fix few links for opac pagination and facets (no uri filter)
[CLOSED FIXED; assigned to kohadevinim]
21950:
Searching with 'accents' breaks on navigating to the second page of results
[CLOSED FIXED; assigned to jonathan.druart]
21950:
Searching with 'accents' breaks on navigating to the second page of results
[CLOSED FIXED; assigned to jonathan.druart]
(*)
21973:
CAS URL escaped twice, preventing login
[CLOSED FIXED; assigned to jonathan.druart]
22585:
Fix remaining double-escaped CAS links
[CLOSED FIXED; assigned to jrittenh]
23132:
Encoding issues in facets with show more link
[CLOSED FIXED; assigned to fridolin.somers]
23378:
Invalid OPAC search RSS: unescaped characters
[RESOLVED DUPLICATE; assigned to oleonard]
24120:
Search terms in search dropdown must be URI filtered
[CLOSED FIXED; assigned to nick]
21529:
Fix display of HTML tags in print notices
[CLOSED FIXED; assigned to jonathan.druart]
21541:
HTML filter breaks HTML rendering of SQL output
[CLOSED FIXED; assigned to nick]
21576:
Add a developer script to automatically fix missing filters
[CLOSED FIXED; assigned to jonathan.druart]
21526:
TT variables used to build a link should be uri filtered
[CLOSED FIXED; assigned to jonathan.druart]
(*)
22466:
TT methods must not be escaped
[CLOSED FIXED; assigned to jonathan.druart]
29350:
TT method 'delete' don't need to be escaped
[CLOSED FIXED; assigned to jonathan.druart]
22605:
Adding the option to modify/edit searches on the staff interface
[CLOSED FIXED; assigned to nick]
30357:
Better display of 'Edit this search'
[NEW; assigned to koha-bugs]
32100:
"edit search" feature quote-wraps search terms if original search had no results
[NEW; assigned to koha-bugs]
17170:
Add the ability to create 'saved searches' for use as filters when searching the catalog
[CLOSED FIXED; assigned to nick]
33680:
Provide ready-made link to search filters
[NEW; assigned to koha-bugs]
38294:
Checkbox/label for search filters incorrectly aligned
[NEW; assigned to koha-bugs]
33011:
Capitalization: Show in Staff interface?
[CLOSED FIXED; assigned to katrin.fischer]
33734:
Using custom search filters breaks diacritics characters in search term
[CLOSED FIXED; assigned to dcook]
27546:
Add option to search within results on the staff interface
[CLOSED FIXED; assigned to nick]
33093:
(Bug 27546 follow-up) With ES searching within results does not work for 'Keyword' and 'Keyword as phrase'
[CLOSED FIXED; assigned to januszop]
31076:
Bug 22605 breaks date of publication range search
[CLOSED FIXED; assigned to nick]
31271:
"Edit search" always resets search options to keyword
[CLOSED FIXED; assigned to nick]
32301:
Show correct defaultSortField in staff interface advanced search
[RESOLVED FIXED; assigned to nick]
35785:
Edit search add quotes
[RESOLVED FIXED; assigned to koha-bugs]
37466:
Reflected Cross Site Scripting
[RESOLVED FIXED; assigned to dcook]
21663:
Incorrect filter prevents predefined notes from being added to patron acccounts
[CLOSED FIXED; assigned to oleonard]
21669:
TT assignment statements must not be html filtered
[CLOSED FIXED; assigned to jonathan.druart]
21669:
TT assignment statements must not be html filtered
[CLOSED FIXED; assigned to jonathan.druart]
(*)
21703:
Placing holds in staff is broken (TT filter)
[CLOSED FIXED; assigned to katrin.fischer]
21704:
Editing subfields in bibliographic frameworks is broken (TT filter)
[CLOSED FIXED; assigned to tomascohen]
23153:
In framework management action subfields goes directly to edition
[CLOSED FIXED; assigned to fridolin.somers]
23179:
Add 'Edit subfields' to framework management tag dropdown and clarify options
[CLOSED FIXED; assigned to nick]
21706:
Editing subfields in authority frameworks is broken (TT filter)
[CLOSED FIXED; assigned to tomascohen]
(*)
21905:
Plugin hook intranet_catalog_biblio_enhancements_toolbar_button incorrectly filtered
[CLOSED FIXED; assigned to kyle]
21947:
Filtering order generates html in notes
[CLOSED FIXED; assigned to mtompset]
22007:
KohaDates output does not need to be html filtered
[CLOSED FIXED; assigned to jonathan.druart]
22058:
OPAC holdings table shows instead of blank
[CLOSED FIXED; assigned to katrin.fischer]
22442:
Item search CSV export broken
[CLOSED FIXED; assigned to jonathan.druart]
22550:
OPAC suggestion form doesn't require mandatory fields
[CLOSED FIXED; assigned to oleonard]
22800:
No need to raw filter the mandatory fields var (OPAC suggestions)
[CLOSED FIXED; assigned to jonathan.druart]
22586:
IntranetReportsHomeHTML no longer renders as HTML on reports-home.pl
[CLOSED FIXED; assigned to lucas]
22596:
html TT filter is breaking items search with custom field
[CLOSED FIXED; assigned to fridolin.somers]
20888:
Allow use of boolean operator 'not' in item search
[CLOSED FIXED; assigned to matthias.meusburger]
22595:
Items search is mixing inputs
[CLOSED FIXED; assigned to fridolin.somers]
22641:
Incorrect filter on SCO printslip
[CLOSED FIXED; assigned to nick]
18387:
404 errors on page causes SCO user to be logged out
[CLOSED FIXED; assigned to nick]
23102:
404 errors on page causes SCI user to be logged out
[Pushed to oldstable; assigned to nick]
23777:
Text converted to html entity codes in cataloguing edit form
[CLOSED FIXED; assigned to jonathan.druart]
26460:
Wrong line ending (semicolon vs comma) in request.tt
[CLOSED FIXED; assigned to nick]
28829:
Useless single quote escaping in value_builder/unimarc_field_4XX.pl
[CLOSED FIXED; assigned to fridolin.somers]
24110:
Template vars are incorrectly html filtered when dumped
[CLOSED FIXED; assigned to jonathan.druart]
24371:
OPAC 'Showing only available items/Show all items' is double encoded
[CLOSED FIXED; assigned to lucas]
25069:
AddressFormat="fr" behavior is broken
[CLOSED FIXED; assigned to jonathan.druart]
25070:
Include files to display address and contact must be refactored
[CLOSED FIXED; assigned to jonathan.druart]
22087:
Show city and state in patron search results
[CLOSED FIXED; assigned to jonathan.druart]
25463:
Patron details page - display the alternative contact address as a block
[CLOSED FIXED; assigned to david.roberts]
25839:
Typo patron.streetype in member-main-address-style.inc
[CLOSED FIXED; assigned to fridolin.somers]
25842:
Typo "streetype" in member-main-address-style.inc
[CLOSED FIXED; assigned to fridolin.somers]
25842:
Typo "streetype" in member-main-address-style.inc
[CLOSED FIXED; assigned to fridolin.somers]
(*)
26556:
Cities autocomplete broken in patron edition
[CLOSED FIXED; assigned to fridolin.somers]
26538:
Display cities list before input text
[CLOSED FIXED; assigned to fridolin.somers]
29213:
Typo ol in member-alt-contact-style.inc
[CLOSED FIXED; assigned to fridolin.somers]
26865:
Double quotes in patron's data breaks patron searches
[RESOLVED DUPLICATE; assigned to koha-bugs]
Max Depth: