Koha-clms

Go to file

Aleisha Amohia 09315dfb28 Bug 37508: Throw error if password column is detected in SQL report This enhancement prevents SQL queries from being run if they would return a password field from the database table. To test: 1. Run tests and notice they fail t/db_dependent/Reports/Guided.t 2. Apply patch and restart services 3. Create a public report with an SQL report which would access a password column in a database table 4. Try to run the report. Notice you are met with an error and the results are not shown. 5. Access the JSON URL, you should not get the results and should be shown an error 6. Confirm tests pass t/db_dependent/Reports/Guided.t Sponsored-by: Reserve Bank of New Zealand Signed-off-by: David Cook <dcook@prosentient.com.au> Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>		2024-08-13 11:54:01 -03:00
C4	Bug 37508: Throw error if password column is detected in SQL report	2024-08-13 11:54:01 -03:00
Koha	Bug 37018: Add 400 response definition to all routes	2024-07-23 15:35:16 +02:00
acqui	Bug 36511: Some scripts missing a dependency following Bug 24879	2024-04-15 07:49:13 +00:00
admin	Bug 35278: Fix warn from column_settings.pl	2023-11-14 13:57:42 -01:00
api	Bug 37018: Add 400 response definition to all routes	2024-07-23 15:35:16 +02:00
authorities	Bug 33406: (QA follow-up) Adjust tests and tidy	2023-10-12 15:45:37 +00:00
basket	Bug 33102: Display fields from biblioitems in OPAC/staff interface cart	2023-05-12 16:34:19 +01:00
bin	…
catalogue	Bug 36511: Some scripts missing a dependency following Bug 24879	2024-04-15 07:49:13 +00:00
cataloguing	Bug 24879: Add check_cookie_auth when missing	2024-03-25 08:23:03 +00:00
circ	Bug 37210: Properly escape SQL query parameters by using bind values	2024-07-25 10:20:59 +02:00
clubs	Bug 30718: Use flatpickr's altInput	2022-08-19 08:26:31 -03:00
course_reserves	Bug 31893: Use checkauth and do not fetch about.tt template	2023-01-31 14:09:05 +00:00
debian	Bug 36149: Unset userenv from middleware	2024-04-24 10:48:12 +00:00
docs	Bug 34424: Add Emily Lamancusa to QA Team	2023-11-13 15:28:49 +00:00
erm	Bug 32922: Remove space in shebang	2023-02-24 07:51:37 +00:00
errors	…
etc	Bug 30843: Add mfa_range configuration option for TOTP	2023-10-17 16:56:21 +00:00
ill	Bug 28909: Allow illview to use backend template	2022-08-09 13:21:39 -03:00
installer	Increment version for 22.11.19	2024-07-26 08:51:18 +02:00
koha-tmpl	Bug 37508: Throw error if password column is detected in SQL report	2024-08-13 11:54:01 -03:00
labels	Bug 36511: Some scripts missing a dependency following Bug 24879	2024-04-15 07:49:13 +00:00
lib/CGI/Session/Serialize	…
members	Bug 34910: (follow-up) alert in patron details	2023-11-13 15:22:12 +00:00
misc	Update release notes for 22.11.19 release	2024-07-26 09:01:37 +02:00
offline_circ	Bug 30016: Remove GetOpenIssue subroutine	2022-08-31 08:50:37 -03:00
opac	Bug 37370: Return 400 if OpacExportOptions does not contain the passed format	2024-08-13 11:54:00 -03:00
patron_lists	…
patroncards	…
plugins	Bug 30367: (follow-up) Same adjustment for gitlab	2023-05-12 15:58:09 +01:00
pos	Bug 34331: Use register from userenv if parameter not passed	2023-08-31 10:23:50 +00:00
recalls	Bug 34013: Recalls awaiting pickup doesn't show count on each tab	2023-07-18 11:21:31 +00:00
reports	Bug 31988: Remove reports/itemtypes.plugin	2024-03-25 08:16:32 +00:00
reserve	Bug 34634: Show expirationdate of expired holds on reserve/request.pl	2023-09-15 09:33:06 +00:00
reviews	…
rotating_collections	…
serials	Bug 37247: Fix display of "closed"	2024-07-23 12:26:02 +02:00
services	…
skel	…
suggestion	Bug 35276: Remove authentication params from suggestion hash	2023-11-16 09:37:10 +00:00
svc	Bug 37508: Throw error if password column is detected in SQL report	2024-08-13 11:54:01 -03:00
t	Bug 37508: Throw error if password column is detected in SQL report	2024-08-13 11:54:01 -03:00
tags	Bug 30718: Use flatpickr's altInput	2022-08-19 08:26:31 -03:00
tools	Bug 37488: Validate paths in datalink.txt/idlink.txt files	2024-08-13 11:53:58 -03:00
virtualshelves	Bug 34650: Remove unnecessary CSRF check on edit_form	2023-09-08 09:47:28 +00:00
xt	Bug 37018: Add 400 response definition to all routes	2024-07-23 15:35:16 +02:00
.editorconfig	…
.eslintrc.json	…
.gitignore	Bug 35174: Add misc/translator/po to .gitignore	2023-11-22 09:37:30 +01:00
.htaccess	…
.mailmap	Update .mailmap	2023-07-18 09:22:47 +00:00
.perlcriticrc	…
.perltidyrc	Bug 30002: Adjust perltidy	2023-07-12 09:16:19 +00:00
.proverc.dist	…
.stylelintrc.json	Bug 31528: (follow-up) A few additional rules	2022-10-03 08:23:15 -03:00
INSTALL	…
Koha.pm	Increment version for 22.11.19	2024-07-26 08:51:18 +02:00
LICENSE	…
MANIFEST.SKIP	…
Makefile.PL	Bug 30002: (QA follow-up) Add .perltidyrc to Makefile.PL mapping	2023-07-12 09:41:28 +00:00
README	…
README.md	…
README.robots	…
about.pl	Bug 35174: Add a warning to the about page	2023-11-22 09:37:14 +01:00
app.psgi	Bug 36149: Add userenv middleware to app.psgi	2024-04-24 10:50:45 +00:00
build-resources.PL	Bug 32609: Use the current yarn.lock to generate node_modules	2023-03-10 12:27:47 +00:00
changelanguage.pl	…
cpanfile	Bug 32558: (QA follow-up) Move ForkManager to required	2023-03-08 14:39:16 +00:00
cypress.json	Bug 33408: Extend defaultCommandTimeout for cypress	2023-05-15 13:15:43 +00:00
fix-perl-path.PL	…
gulpfile.js	Bug 35174: Don't run gulp po commands if po dir is missing	2023-11-22 09:37:36 +01:00
help.pl	…
kohaversion.pl	…
mainpage.pl	Rmaint fix: Remove Koha::Tickets import from 35019 rebase	2023-11-14 16:11:36 +00:00
package.json	Bug 33066: Introduce a KohaTable Vue component	2023-05-11 17:01:22 +01:00
rewrite-config.PL	…
tsconfig.json	Bug 32030: Move cypress to t - fix build_js/watch_js	2022-11-08 09:44:52 -03:00
webpack.config.js	Bug 32806: Move main-erm.ts to modules/erm.ts	2023-02-28 18:54:57 +00:00
yarn.lock	Bug 33066: Introduce a KohaTable Vue component	2023-05-11 17:01:22 +01:00

README.md

Koha is a free software integrated library system (ILS).

Koha is distributed under the GNU GPL version 3 or later.

Note: Koha does not accept pull requests from git hosting sites.

Note: This project has its own bug tracker, to report a bug or submit a patch visit http://bugs.koha-community.org.

For guidelines on submitting patches for Koha please visit https://wiki.koha-community.org/wiki/SubmitingAPatch

The developers handbook can be found at https://wiki.koha-community.org/wiki/Developer_handbook

http://koha-community.org/