gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
55,017 Commits 39 Branches 720 Tags 6 GiB
Perl 44.2%
JavaScript 41.1%
HTML 6%
XSLT 3.1%
Vue 1.9%
Other 3.2%
Go to file
Jonathan Druart b264623e48
Bug 39305: Display a warning on the about page if Plack is not running 
CSRF protection is only working if Koha is running under Plack.

The about page is not showing any errors if plack is not running.

Test plan:
0. Do not apply this patch
1. Go to the about page
=> Notice the "PSGI" entry in the "Server information" tab
2. Disable plack
koha-plack --disable kohadev && restart_all
3. Go to the about page
=> Notice that the "PSGI" entry is not displayed, and nothing indicates
that plack is not running
4. Apply this patch
=> "PSGI" now shows "Koha is running in CGI mode. This is a security issue! Use koha-plack --help"

Better wording idea welcome.

Signed-off-by: David Nind <david@davidnind.com>
Signed-off-by: Baptiste Wojtkowski <baptiste.wojtkowski@biblibre.com>
Signed-off-by: Jesse Maseto <jesse@bywatersolutions.com>
 		2025-07-23 16:15:49 -04:00
C4 Bug 39184: Turn off ABSOLUTE and EVAL_PERL for user-entered templates 2025-05-21 01:20:21 +00:00
Koha Bug 39772: Extend background_tasks API to allow for human-readable job names 2025-07-23 15:17:20 -04:00
acqui Bug 38155: (QA follow-up) Fix TT filters and scalar context 2025-04-15 09:02:56 +00:00
admin Bug 39772: Extend background_tasks API to allow for human-readable job names 2025-07-23 15:17:20 -04:00
api Bug 37809: (follow-up) Allow embedding item.biblio too 2025-06-13 15:30:07 +00:00
authorities Bug 38200: Remove dead code to delete authorities in authorities/authorities.pl 2024-11-20 18:34:52 +00:00
basket Bug 34478: Add 'op' to sendbasketform 2024-03-01 10:58:53 +01:00
bin
…
bookings Bug 35574: Bookings tab from biblio details should only require manage_bookings permission 2023-12-18 15:21:04 +01:00
catalogue Bug 38000: Update imports 2024-11-18 22:49:20 +00:00
cataloguing Bug 38030: (QA follow-up) Move csrf_token to POST body from URL 2024-11-21 14:34:53 +00:00
circ Bug 38246: [24.05.x] Only check unresolved claims 2025-03-20 04:45:06 +00:00
clubs Bug 34478: Manual fix - add op clubs/templates-add-modify 2024-03-01 10:57:55 +01:00
course_reserves Bug 28762: Use Koha::Course in course-details controller 2024-08-28 20:20:33 +00:00
debian Bug 33018: debian package tidy-up 2025-03-20 01:42:26 +00:00
docs Bug 38517: Add the 25.05 release team 2024-12-17 00:21:37 +00:00
erm Bug 32922: Remove space in shebang 2023-02-20 09:44:06 -03:00
errors Bug 37741: Do not send cookie back from error pages 2024-11-15 20:31:16 +00:00
etc Bug 37087: Add TCP keepalive support to SIP server 2024-12-31 16:51:59 +13:00
ill Bug 35106: CSRF fix 2024-04-29 18:53:09 +02:00
installer Increment version for 24.05.11 release 2025-06-24 13:18:40 -04:00
koha-tmpl Bug 39305: Display a warning on the about page if Plack is not running 2025-07-23 16:15:49 -04:00
labels Bug 37206: Removing an item from a label batch should be a CSRF-protected POST operation 2024-11-18 17:41:08 +00:00
lib Bug 35681: Use ::Bootstrap version of FromANSI 2024-05-02 16:47:39 +02:00
members Bug 37365: (QA follow-up) Add error checking around AddFile call 2024-12-05 21:49:10 +00:00
misc Bug 39887: Improve documentation for overdue_notices.pl 2025-07-07 13:12:51 -04:00
offline_circ Bug 34478: Changes for offline_circ 2024-03-01 10:58:34 +01:00
opac Bug 36867: (follow-up) Don't check IP if ILS-DI disabled 2025-05-06 00:03:36 +00:00
patron_lists Bug 37266: [24.05.x] patron_lists/delete.pl should have CSRF protection 2025-02-25 19:21:07 +00:00
patroncards Bug 37614: Printing patron cards from patron lists should be a GET 2024-09-11 16:37:03 +00:00
plugins Bug 30897: Add option to disable automated restart 2024-04-11 16:53:42 +02:00
pos Bug 33478: Apply formatting to RECEIPT 2024-04-26 20:15:44 +02:00
preservation Bug 38089: (follow-up) More fixes for errors in original submission 2024-11-18 22:53:55 +00:00
recalls Bug 38089: (follow-up) More fixes for errors in original submission 2024-11-18 22:53:55 +00:00
reports Bug 37784: [24.05] (QA follow-up) Bail out to new definition 2025-03-21 01:41:34 +00:00
reserve Bug 37587: (QA follow-up) Tidy reserve/placerequest.pl 2024-10-09 19:34:22 +00:00
reviews Bug 37074: Comment approval and un-approval should be CSRF-protected 2024-07-25 14:08:54 +00:00
rotating_collections Bug 34478: Manual fix - add op - rotating_collections/addItems 2024-03-01 10:57:33 +01:00
serials Bug 29818: Cannot save subscription frequency without display order 2024-12-05 23:05:45 +00:00
services Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
skel
…
suggestion Bug 37246: Use the same dropdown for filtering and editing/adding budgets 2024-11-18 17:52:00 +00:00
svc Bug 37056: Mount a new intranet_svc api to avoid redirects 2024-11-18 17:42:23 +00:00
t Bug 39772: Extend background_tasks API to allow for human-readable job names 2025-07-23 15:17:20 -04:00
tags Bug 38969: Prevent XSS in tags/review.pl and Prevent JS error when adding tags with quote at the OPAC 2025-04-24 16:46:40 +12:00
tools Bug 38452: Use lc() for case insensitivity 2025-03-13 21:29:31 +00:00
virtualshelves Bug 37285: (QA follow-up) Perl Tidy 2024-08-29 15:06:09 +00:00
xt Bug 37490: Add a test to detect when yarn.lock is not updated 2024-11-15 20:43:22 +00:00
.editorconfig Bug 27375: Set YAML file settings in .editorconfig 2021-11-03 15:40:52 +01:00
.eslintrc.json Bug 36400: Centralize {js,ts,vue} formatting config in .prettierrc.js 2024-04-22 08:57:39 +02:00
.gitignore Bug 36546: (QA follow-up) Add bundle spec to .gitignore 2024-04-30 15:55:37 -03:00
.htaccess
…
.mailmap Bug 36943: (follow-up) 24.05.00 - Update .mailmap 2024-05-24 15:36:40 +02:00
.perlcriticrc Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
.perltidyrc Bug 30002: Adjust perltidy 2023-06-08 08:32:42 -03:00
.prettierrc.js Bug 36400: (follow-up) remove option editorconfig from .prettierrc.js 2024-04-22 08:57:40 +02:00
.proverc.dist Bug 19821: Install sample data, ES mappings and Version syspref 2021-10-25 11:27:40 +02:00
.stylelintrc.json Bug 31528: (follow-up) A few additional rules 2022-10-03 08:23:15 -03:00
INSTALL Bug 26617: Update INSTALL file to include koha-testing-docker and Gitlab links 2020-10-15 12:56:30 +02:00
Koha.pm Increment version for 24.05.11 release 2025-06-24 13:18:40 -04:00
LICENSE
…
MANIFEST.SKIP
…
Makefile.PL Bug 38779: Add built record sources assets on install 2025-02-19 14:28:04 +13:00
README
…
README.md Bug 27092: Remove note about "synced repo" from README.md 2020-11-25 16:31:58 +01:00
README.robots
…
about.pl Bug 37509: Check Elasticsearch info for both 'about' and 'sysinfo' tabs 2024-09-06 16:52:55 +00:00
app.psgi Bug 36149: Add userenv middleware to app.psgi 2024-05-14 15:04:37 -03:00
build-resources.PL Bug 32609: Use the current yarn.lock to generate node_modules 2023-02-10 11:07:57 -03:00
changelanguage.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
cpanfile Bug 33018: debian package tidy-up (2) 2025-03-20 01:42:27 +00:00
cypress.config.ts Bug 36012: Extend cypress's requestTimeout value 2024-03-22 15:07:36 +01:00
fix-perl-path.PL Bug 28606: Remove $DEBUG and $ENV{DEBUG} 2021-06-24 11:53:44 +02:00
gulpfile.js Bug 36730: (Bug 35428 follow-up) po files (sometimes) fail to update 2024-05-07 15:53:44 +02:00
help.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
kohaversion.pl
…
mainpage.pl Bug 30493: (QA follow-up) Fix for the only_my_library case as well 2024-07-18 19:31:50 +00:00
package.json Bug 37824: Replace webpack with rspack for fun and profit 2024-12-05 18:54:16 +00:00
rewrite-config.PL Bug 28519: Put CGI::Session::Serialize::yamlxs in lib directory 2021-06-17 10:07:36 +02:00
rspack.config.js Bug 37824: (QA follow-up) Fix improper handling of jQuery and DataTables libraries by marking them as externals 2024-12-05 18:54:16 +00:00
tsconfig.json Bug 32030: Move cypress to t - fix build_js/watch_js 2022-11-08 09:44:52 -03:00
webpack.config.js Bug 35919: Add record sources admin page 2024-04-26 17:06:04 +02:00
yarn.lock Bug 37824: Replace webpack with rspack for fun and profit 2024-12-05 18:54:16 +00:00

README.md

Koha is a free software integrated library system (ILS).

Koha is distributed under the GNU GPL version 3 or later.

Note: Koha does not accept pull requests from git hosting sites.

Note: This project has its own bug tracker, to report a bug or submit a patch visit http://bugs.koha-community.org.

For guidelines on submitting patches for Koha please visit https://wiki.koha-community.org/wiki/SubmitingAPatch

The developers handbook can be found at https://wiki.koha-community.org/wiki/Developer_handbook

http://koha-community.org/

Koha Logo