Max Depth:

Bug 14418 does not depend on any bugs.

Bug 14418 blocks 86 bugs:

view as bug list

•    14418: XSS Flaws in OPAC Interface [CLOSED FIXED; assigned to oleonard]
  •    13618: Add additional template filter methods and a filter presence test to Koha [CLOSED FIXED; assigned to jonathan.druart]
    •    14744: Cannot select guarantor when quote in one of the fields [RESOLVED DUPLICATE; assigned to philippe.blouin]
    •    15717: Installer: Step 3 has HTML tag br showing [CLOSED FIXED; assigned to mtompset]
    •    15733: Audio Alerts issues in master [RESOLVED DUPLICATE; assigned to kyle]
    •    15734: Audio Alerts broken [CLOSED FIXED; assigned to jonathan.druart]
      •    15733: Audio Alerts issues in master [RESOLVED DUPLICATE; assigned to kyle] (*)
    •    15754: html tags displayed when editing frameworks [CLOSED INVALID; assigned to jonathan.druart]
      •    15771: CGI::escapeHTML should not be used anymore [RESOLVED DUPLICATE; assigned to jonathan.druart]
    •    20975: Improve auto escaping performance [CLOSED WONTFIX; assigned to jonathan.druart]
    •    21257: Patrons checkout table throws JS error when location/collection not defined [CLOSED FIXED; assigned to jonathan.druart]
    •    21293: Display of housebound delivery information broken by Bug 13618 [CLOSED FIXED; assigned to oleonard]
    •    21347: bad code for input field in item information tab of addorderiso2709 page [CLOSED FIXED; assigned to chris]
    •    21377: Variable declarations erroneously filtered [CLOSED FIXED; assigned to bugzilla]
    •    21393: Make template filter checks code reusable [CLOSED FIXED; assigned to jonathan.druart]
      •    21731: t::lib::QA::TemplateFilters missing built-in TT filter "xml" causes false warnings [Failed QA; assigned to dcook]
      •    21454: Price filtered variables should not need to be html filtered [CLOSED FIXED; assigned to jonathan.druart]
      •    21770: t::lib::QA::TemplateFilters should allow html_entity in href [CLOSED FIXED; assigned to jonathan.druart]
    •    21418: Incorrectly filtered markup in staff client lists [CLOSED FIXED; assigned to oleonard]
    •    21454: Price filtered variables should not need to be html filtered [CLOSED FIXED; assigned to jonathan.druart] (*)
    •    21476: Incorrect filter prevents HTML5 media from playing in the OPAC [CLOSED FIXED; assigned to nick]
      •    20783: Cannot embed some YouTube videos due to 403 errors [CLOSED FIXED; assigned to jonathan.druart]
    •    21526: TT variables used to build a link should be uri filtered [CLOSED FIXED; assigned to jonathan.druart]
      •    22223: Item url double-encode when parameter is an encoded URL [Pushed to main; assigned to dcook]
      •    21706: Editing subfields in authority frameworks is broken (TT filter) [CLOSED FIXED; assigned to tomascohen]
      •    21878: Fix few links for opac pagination and facets (no uri filter) [CLOSED FIXED; assigned to kohadevinim]
        •    21950: Searching with 'accents' breaks on navigating to the second page of results [CLOSED FIXED; assigned to jonathan.druart]
      •    21950: Searching with 'accents' breaks on navigating to the second page of results [CLOSED FIXED; assigned to jonathan.druart] (*)
      •    21973: CAS URL escaped twice, preventing login [CLOSED FIXED; assigned to jonathan.druart]
        •    22585: Fix remaining double-escaped CAS links [CLOSED FIXED; assigned to jrittenh]
      •    23132: Encoding issues in facets with show more link [CLOSED FIXED; assigned to fridolin.somers]
      •    23378: Invalid OPAC search RSS: unescaped characters [RESOLVED DUPLICATE; assigned to oleonard]
      •    24120: Search terms in search dropdown must be URI filtered [CLOSED FIXED; assigned to nick]
    •    21529: Fix display of HTML tags in print notices [CLOSED FIXED; assigned to jonathan.druart]
    •    21541: HTML filter breaks HTML rendering of SQL output [CLOSED FIXED; assigned to nick]
    •    21576: Add a developer script to automatically fix missing filters [CLOSED FIXED; assigned to jonathan.druart]
      •    21526: TT variables used to build a link should be uri filtered [CLOSED FIXED; assigned to jonathan.druart] (*)
      •    22466: TT methods must not be escaped [CLOSED FIXED; assigned to jonathan.druart]
        •    29350: TT method 'delete' don't need to be escaped [CLOSED FIXED; assigned to jonathan.druart]
          •    22605: Adding the option to modify/edit searches on the staff interface [CLOSED FIXED; assigned to nick]
            •    30357: Better display of 'Edit this search' [NEW; assigned to koha-bugs]
            •    32100: "edit search" feature quote-wraps search terms if original search had no results [NEW; assigned to koha-bugs]
            •    17170: Add the ability to create 'saved searches' for use as filters when searching the catalog [CLOSED FIXED; assigned to nick]
              •    33680: Provide ready-made link to search filters [NEW; assigned to koha-bugs]
              •    38294: Checkbox/label for search filters incorrectly aligned [NEW; assigned to koha-bugs]
              •    33011: Capitalization: Show in Staff interface? [CLOSED FIXED; assigned to katrin.fischer]
              •    33734: Using custom search filters breaks diacritics characters in search term [CLOSED FIXED; assigned to dcook]
              •    34761: Stored/reflected XSS with searches and saved search filters [RESOLVED FIXED; assigned to dcook]
            •    27546: Add option to search within results on the staff interface [CLOSED FIXED; assigned to nick]
              •    33093: (Bug 27546 follow-up) With ES searching within results does not work for 'Keyword' and 'Keyword as phrase' [CLOSED FIXED; assigned to januszop]
            •    31076: Bug 22605 breaks date of publication range search [CLOSED FIXED; assigned to nick]
            •    31271: "Edit search" always resets search options to keyword [CLOSED FIXED; assigned to nick]
            •    32301: Show correct defaultSortField in staff interface advanced search [RESOLVED FIXED; assigned to nick]
            •    35785: Edit search add quotes [RESOLVED FIXED; assigned to koha-bugs]
            •    37466: Reflected Cross Site Scripting [RESOLVED FIXED; assigned to dcook]
    •    21663: Incorrect filter prevents predefined notes from being added to patron acccounts [CLOSED FIXED; assigned to oleonard]
      •    21669: TT assignment statements must not be html filtered [CLOSED FIXED; assigned to jonathan.druart]
    •    21669: TT assignment statements must not be html filtered [CLOSED FIXED; assigned to jonathan.druart] (*)
    •    21703: Placing holds in staff is broken (TT filter) [CLOSED FIXED; assigned to katrin.fischer]
    •    21704: Editing subfields in bibliographic frameworks is broken (TT filter) [CLOSED FIXED; assigned to tomascohen]
      •    23153: In framework management action subfields goes directly to edition [CLOSED FIXED; assigned to fridolin.somers]
        •    23179: Add 'Edit subfields' to framework management tag dropdown and clarify options [CLOSED FIXED; assigned to nick]
    •    21706: Editing subfields in authority frameworks is broken (TT filter) [CLOSED FIXED; assigned to tomascohen] (*)
    •    21905: Plugin hook intranet_catalog_biblio_enhancements_toolbar_button incorrectly filtered [CLOSED FIXED; assigned to kyle]
    •    21947: Filtering order generates html in notes [CLOSED FIXED; assigned to mtompset]
    •    22007: KohaDates output does not need to be html filtered [CLOSED FIXED; assigned to jonathan.druart]
    •    22058: OPAC holdings table shows   instead of blank [CLOSED FIXED; assigned to katrin.fischer]
    •    22442: Item search CSV export broken [CLOSED FIXED; assigned to jonathan.druart]
    •    22550: OPAC suggestion form doesn't require mandatory fields [CLOSED FIXED; assigned to oleonard]
      •    22800: No need to raw filter the mandatory fields var (OPAC suggestions) [CLOSED FIXED; assigned to jonathan.druart]
    •    22586: IntranetReportsHomeHTML no longer renders as HTML on reports-home.pl [CLOSED FIXED; assigned to lucas]
    •    22596: html TT filter is breaking items search with custom field [CLOSED FIXED; assigned to fridolin.somers]
      •    20888: Allow use of boolean operator 'not' in item search [CLOSED FIXED; assigned to matthias.meusburger]
      •    22595: Items search is mixing inputs [CLOSED FIXED; assigned to fridolin.somers]
    •    22641: Incorrect filter on SCO printslip [CLOSED FIXED; assigned to nick]
      •    18387: 404 errors on page causes SCO user to be logged out [CLOSED FIXED; assigned to nick]
        •    23102: 404 errors on page causes SCI user to be logged out [Pushed to oldstable; assigned to nick]
    •    23777: Text converted to html entity codes in cataloguing edit form [CLOSED FIXED; assigned to jonathan.druart]
      •    26460: Wrong line ending (semicolon vs comma) in request.tt [CLOSED FIXED; assigned to nick]
      •    28829: Useless single quote escaping in value_builder/unimarc_field_4XX.pl [CLOSED FIXED; assigned to fridolin.somers]
    •    24110: Template vars are incorrectly html filtered when dumped [CLOSED FIXED; assigned to jonathan.druart]
    •    24371: OPAC 'Showing only available items/Show all items' is double encoded [CLOSED FIXED; assigned to lucas]
    •    25069: AddressFormat="fr" behavior is broken [CLOSED FIXED; assigned to jonathan.druart]
      •    25070: Include files to display address and contact must be refactored [CLOSED FIXED; assigned to jonathan.druart]
        •    22087: Show city and state in patron search results [CLOSED FIXED; assigned to jonathan.druart]
        •    25463: Patron details page - display the alternative contact address as a block [CLOSED FIXED; assigned to david.roberts]
        •    25839: Typo patron.streetype in member-main-address-style.inc [CLOSED FIXED; assigned to fridolin.somers]
          •    25842: Typo "streetype" in member-main-address-style.inc [CLOSED FIXED; assigned to fridolin.somers]
        •    25842: Typo "streetype" in member-main-address-style.inc [CLOSED FIXED; assigned to fridolin.somers] (*)
        •    26556: Cities autocomplete broken in patron edition [CLOSED FIXED; assigned to fridolin.somers]
          •    26538: Display cities list before input text [CLOSED FIXED; assigned to fridolin.somers]
        •    29213: Typo ol in member-alt-contact-style.inc [CLOSED FIXED; assigned to fridolin.somers]
    •    26865: Double quotes in patron's data breaks patron searches [RESOLVED DUPLICATE; assigned to koha-bugs]
  •    14524: Result list RSS feed broken [CLOSED FIXED; assigned to jonathan.druart]

Max Depth:

• • Home
  • | New
  • | Browse
  • | Search
  • |
    [?]
  • | Reports
  • | Help
  • | New Account
  • | Log In
    [x]
  • | Forgot Password
    Login: [x]