Go to file
Marcel de Rooy 9dc5842b8c
Bug 37784: (QA follow-up) Bail out to new definition
The code went back to step 3 but the error message is not there.
It is easier to go back to the start: no need to fetch columns.
And this is now an exception; it will only come up when trying
malicious things.

Also turned foreach and unless forbidden around. No need to go
into the loop when we found a forbidden field.

Test plan:
See first patch. You should see the message now.

Signed-off-by: Paul Derscheid <paul.derscheid@lmscloud.de>
2025-03-24 17:59:10 +01:00
C4 Bug 37784: Do not show forbidden columns in reports dictionary 2025-03-24 17:59:09 +01:00
Koha Merge remote-tracking branch 'upstream/24.11.x' into 24.11.x-security 2025-02-26 19:24:37 +01:00
acqui Bug 38155: (QA follow-up) Fix TT filters and scalar context 2025-02-04 21:44:06 +01:00
admin Bug 38482: Remove save state for the holdings tables 2024-11-20 14:02:01 +01:00
api Bug 28907: REST - Remove allow-owner from public article requests cancel route 2025-02-18 19:17:18 +01:00
authorities Bug 36603: (QA follow-up) Resolve two conditional declarations 2024-11-08 16:42:53 +01:00
basket Bug 31224: Update instances of metadata->record 2024-11-07 16:29:23 +01:00
bin
…
bookings
…
catalogue Bug 31224: Update instances of metadata->record 2024-11-07 16:29:23 +01:00
cataloguing Bug 38030: (QA follow-up) Move csrf_token to POST body from URL 2024-11-21 13:49:08 +01:00
circ Bug 28294: (follow-up) Adjust call to request transfer 2024-11-20 14:01:51 +01:00
clubs
…
course_reserves
…
debian Bug 33018: debian package tidy-up 2025-01-30 22:54:38 +01:00
docs 24.11.00: Update history.txt 2024-11-25 20:38:55 +01:00
erm
…
errors Bug 37741: Do not send cookie back from error pages 2024-08-30 12:45:45 +02:00
etc Bug 36991: Add ability to scan call numbers index/search field 2024-11-08 16:42:51 +01:00
ill Bug 35570: Prevent use of ILL module if deprecated FreeForm backend is installed 2024-10-31 08:05:21 +01:00
installer Increment version for 24.11.02 release 2025-02-26 19:34:43 +01:00
koha-tmpl Bug 37784: Do not show forbidden columns in reports dictionary 2025-03-24 17:59:09 +01:00
labels Bug 30745: (QA follow-up) tidy 2024-11-18 17:44:31 +01:00
lib
…
members Bug 28633: Add preferred name field to patrons 2024-11-11 14:12:09 +01:00
misc Update release notes for 24.11.02 release 2025-02-26 19:49:30 +01:00
offline_circ
…
opac Merge remote-tracking branch 'upstream/24.11.x' into 24.11.x-security 2025-02-26 19:24:37 +01:00
patron_lists Bug 37266: [24.11.x] patron_lists/delete.pl should have CSRF protection 2025-02-24 19:30:42 +01:00
patroncards
…
plugins
…
pos
…
preservation Bug 38089: (follow-up) More fixes for errors in original submission 2024-10-11 11:13:47 +02:00
recalls Bug 38089: (follow-up) More fixes for errors in original submission 2024-10-11 11:13:47 +02:00
reports Bug 37784: (QA follow-up) Bail out to new definition 2025-03-24 17:59:10 +01:00
reserve Bug 37427: Fix club search to display all clubs when search field is empty, consistent with patron search behavior 2025-02-13 10:04:54 +01:00
reviews Bug 2486: Show user comments in staff interface 2024-08-26 17:39:42 +02:00
rotating_collections
…
serials Bug 29818: Cannot save subscription frequency without display order 2024-11-18 17:44:35 +01:00
services
…
skel
…
suggestion Bug 33484: Fix for suggestions 2024-10-28 17:10:26 +01:00
svc Bug 31224: Update instances of metadata->record 2024-11-07 16:29:23 +01:00
t Bug 37784: Do not show forbidden columns in reports dictionary 2025-03-24 17:59:09 +01:00
tags
…
tools Merge remote-tracking branch 'upstream/24.11.x' into 24.11.x-security 2025-02-26 19:24:37 +01:00
virtualshelves Bug 31224: Update instances of metadata->record 2024-11-07 16:29:23 +01:00
xt Bug 37728: Adjust test to catch more missing 'op' in POSTed forms 2024-10-18 14:25:56 +02:00
.editorconfig
…
.eslintrc.json
…
.gitignore
…
.htaccess
…
.mailmap 24.11.00: Update .mailmap 2024-11-25 13:16:42 +01:00
.perlcriticrc
…
.perltidyrc
…
.prettierrc.js
…
.proverc.dist
…
.stylelintrc.json
…
INSTALL
…
Koha.pm Increment version for 24.11.02 release 2025-02-26 19:34:43 +01:00
LICENSE
…
MANIFEST.SKIP
…
Makefile.PL Bug 38779: Add built record sources assets on install 2025-02-04 21:56:03 +01:00
README
…
README.md
…
README.robots
…
about.pl Bug 35570: Prevent use of ILL module if deprecated FreeForm backend is installed 2024-10-31 08:05:21 +01:00
app.psgi
…
build-resources.PL
…
changelanguage.pl
…
cpanfile Merge remote-tracking branch 'upstream/24.11.x' into 24.11.x-security 2025-02-26 19:24:37 +01:00
cypress.config.ts
…
fix-perl-path.PL
…
gulpfile.js Bug 36640: (follow-up) CSS fixes for DataTables controls 2024-11-14 14:19:34 +01:00
help.pl
…
kohaversion.pl
…
mainpage.pl Bug 36064: (QA follow-up) Simplify and tidy 2024-10-25 11:09:51 +02:00
package.json Bug 38424: Upgrade redoclyly/cli version to latest stable 2024-11-20 11:36:26 +01:00
rewrite-config.PL
…
rspack.config.js Bug 37824: (QA follow-up) Fix improper handling of jQuery and DataTables libraries by marking them as externals 2024-09-16 18:41:17 +02:00
tsconfig.json
…
webpack.config.js
…
yarn.lock 38424: Update yarn.lock 2024-11-20 11:36:27 +01:00

README.md

Koha is a free software integrated library system (ILS).

Koha is distributed under the GNU GPL version 3 or later.

Note: Koha does not accept pull requests from git hosting sites.

Note: This project has its own bug tracker, to report a bug or submit a patch visit http://bugs.koha-community.org.

For guidelines on submitting patches for Koha please visit https://wiki.koha-community.org/wiki/SubmitingAPatch

The developers handbook can be found at https://wiki.koha-community.org/wiki/Developer_handbook

http://koha-community.org/

Koha Logo