Go to file
David Cook 1065ec6aab Bug 38468: Add double quotes to some template strings
This change adds double quotes to some template strings where
quotes are missing all together or single quotes are used incorrectly.

Test plan:
0. Apply the patch
1. Go to http://localhost:8081/cgi-bin/koha/catalogue/search.pl?q=test
2. Click on "Gairm"
3. Use the search result navigation box to go to the next result
   On the left of the page. Just bellow the breadcrumb and
   left of the record title.
4. Note that everything loads correctly

5. To test that the security hole has been fixed, try some of the
proof-of-concept attacks provided for biblionumber and searchid

Signed-off-by: Victor Grousset/tuxayo <victor@tuxayo.net>
Signed-off-by: Baptiste Wojtkowski <baptiste.wojtkowski@biblibre.com>
Signed-off-by: Paul Derscheid <paul.derscheid@lmscloud.de>
Signed-off-by: wainuiwitikapark <wainuiwitikapark@catalyst.net.nz>
(cherry picked from commit 6456c0b98d)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
2025-01-09 09:56:45 +01:00
C4 Bug 23426: (follow-up) This patch reintroduces the former implementation of fine items 2024-12-18 14:29:36 +01:00
Koha Bug 38522: DBIC schema update 2024-12-18 16:57:39 +01:00
acqui Bug 37265: Consideration of UniqueItemFields setting when receiving items in an order 2024-12-11 15:06:43 +01:00
admin Bug 37954: Fix barcode column name 2024-12-11 16:02:59 +01:00
api Bug 37856: Add service_platform field 2024-12-18 10:16:51 +01:00
authorities Bug 25387: (QA follow-up) Tidy 2024-07-19 11:30:08 +02:00
basket Bug 34731: Don't call SendQueuedMessages if message_id is bad 2023-09-12 09:44:59 -03:00
bin
…
bookings Bug 35574: Bookings tab from biblio details should only require manage_bookings permission 2024-01-03 15:48:28 +01:00
catalogue Bug 38000: Update imports 2024-12-11 15:25:48 +01:00
cataloguing Bug 36792: Limit POSIX imports 2024-05-30 10:02:31 +02:00
circ Bug 37365: (QA follow-up) Add borrowernumber to referrer url 2024-12-18 11:22:36 +01:00
clubs
…
course_reserves
…
debian Bug 38249: Fix typo in koha-list --help 2024-12-13 16:08:39 +01:00
docs Bug 38517: Add the 25.05 release team 2024-12-18 14:56:53 +01:00
erm
…
errors
…
etc Bug 37582: Add ability to for SIP to convert control and separator characters to spaces 2024-12-13 16:21:09 +01:00
ill Bug 35930: Add guards for plugins_enabled 2024-02-15 10:51:57 +01:00
installer Bug 38522: DBRev 23.11.10.005 2024-12-18 16:57:20 +01:00
koha-tmpl Bug 38468: Add double quotes to some template strings 2025-01-09 09:56:45 +01:00
labels Bug 33339: Prevent Formula Injection (CSV Injection) in CSV files 2024-11-05 15:43:13 +01:00
lib/CGI/Session/Serialize
…
members Bug 37365: (QA follow-up) Add error checking around AddFile call 2024-12-18 11:22:36 +01:00
misc Bug 23426: (follow-up) Enhance sip_cli_emulator.pl for test plan 2024-12-18 14:29:36 +01:00
offline_circ Bug 34529: Offline circulation should be able to accept userid as well as cardnumber 2023-11-06 11:34:44 -03:00
opac Bug 38362: Fix printing lists on opac/opac-shelves.pl 2024-12-18 16:40:02 +01:00
patron_lists Bug 34977: (QA follow-up) Tidy code 2023-11-08 11:41:33 -03:00
patroncards
…
plugins Bug 35536: Refine verbose handling in some Koha::Plugins calls 2024-07-22 14:00:11 +02:00
pos Bug 34731: Don't call SendQueuedMessages if message_id is bad 2023-09-12 09:44:59 -03:00
preservation Bug 34030: Add a "print slips" action links to print in batch 2023-10-23 11:33:55 -03:00
recalls
…
reports Bug 37595: Double HTML escaped ampersand in pagination bar 2024-12-06 10:18:28 +01:00
reserve Bug 35559: Revert changes from bug 34634 2024-05-24 14:43:23 +02:00
reviews
…
rotating_collections
…
serials Bug 29818: Cannot save subscription frequency without display order 2024-12-18 14:37:34 +01:00
services
…
skel
…
suggestion Bug 37337: Pass the save $op when biblio_exists 2024-09-17 15:55:11 +02:00
svc Bug 37508: Throw error if password column is detected in SQL report 2024-08-13 02:03:22 -03:00
t Bug 38526: (bug 36822 follow-up): Improve datetime comparison in tests 2024-12-18 14:46:43 +01:00
tags
…
tools Bug 37326: decode barcode file in inventory tool 2024-12-18 14:31:23 +01:00
virtualshelves Bug 37285: (QA follow-up) Perl Tidy 2024-09-10 16:49:41 +02:00
xt Bug 37490: Add a test to detect when yarn.lock is not updated 2024-12-02 10:03:14 +01:00
.editorconfig
…
.eslintrc.json
…
.gitignore Bug 35174: Add misc/translator/po to .gitignore 2023-11-16 08:56:36 +01:00
.htaccess
…
.mailmap Bug 36943: (follow-up) 24.05.00 - Update .mailmap 2024-05-30 10:03:25 +02:00
.perlcriticrc
…
.perltidyrc
…
.proverc.dist
…
.stylelintrc.json
…
INSTALL
…
Koha.pm Bug 38522: DBRev 23.11.10.005 2024-12-18 16:57:20 +01:00
LICENSE
…
MANIFEST.SKIP
…
Makefile.PL Bug 35759: (bug 30708 follow-up) Generated dist file not installed for preservation module 2024-01-17 10:06:28 +01:00
README
…
README.md
…
README.robots
…
about.pl Bug 36134: Read complete Elasticsearch configuration in about.pl 2024-03-11 11:20:07 +01:00
app.psgi Bug 36149: Add userenv middleware to app.psgi 2024-04-24 07:36:20 +02:00
build-resources.PL
…
changelanguage.pl
…
cpanfile Bug 34064: Add SQL::Translator dependency to cpanfile 2023-10-10 10:54:04 -03:00
cypress.config.ts
…
fix-perl-path.PL
…
gulpfile.js Bug 36730: (Bug 35428 follow-up) po files (sometimes) fail to update 2024-05-24 16:12:44 +02:00
help.pl
…
kohaversion.pl
…
mainpage.pl Bug 30493: (QA follow-up) Fix for the only_my_library case as well 2024-07-19 11:05:22 +02:00
package.json
…
rewrite-config.PL
…
tsconfig.json
…
webpack.config.js Bug 30708: Vue app 2023-10-18 15:41:40 -03:00
yarn.lock Bug 34319: Update yarn.lock 2023-09-05 11:52:25 -03:00

README.md

Koha is a free software integrated library system (ILS).

Koha is distributed under the GNU GPL version 3 or later.

Note: Koha does not accept pull requests from git hosting sites.

Note: This project has its own bug tracker, to report a bug or submit a patch visit http://bugs.koha-community.org.

For guidelines on submitting patches for Koha please visit https://wiki.koha-community.org/wiki/SubmitingAPatch

The developers handbook can be found at https://wiki.koha-community.org/wiki/Developer_handbook

http://koha-community.org/

Koha Logo