Aleisha Amohia 947865f83b Bug 37508: Throw error if password column is detected in SQL report ... This enhancement prevents SQL queries from being run if they would return a password field from the database table. To test: 1. Run tests and notice they fail t/db_dependent/Reports/Guided.t 2. Apply patch and restart services 3. Create a public report with an SQL report which would access a password column in a database table 4. Try to run the report. Notice you are met with an error and the results are not shown. 5. Access the JSON URL, you should not get the results and should be shown an error 6. Confirm tests pass t/db_dependent/Reports/Guided.t Sponsored-by: Reserve Bank of New Zealand Signed-off-by: David Cook <dcook@prosentient.com.au> Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io> Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>		2024-08-16 16:22:23 +02:00
..
AuthoritiesMarc
Barcodes
ClassSortRoutine
ClassSplitRoutine
Creators
External
Form
Heading	Bug 36917: (follow-up) Remove Elasticsearch warnings and tidy	2024-05-24 15:36:42 +02:00
ILSDI	Bug 28762: (follow-up) Fix missed not_for_loan_status rename	2024-07-23 16:04:07 +01:00
Installer
Labels
Linker	Bug 35125: Respect LinkerConsiderThesaurus in update_cache	2024-07-01 18:55:42 +02:00
Members
OAI
Output
Patroncards
Reports	Bug 37508: Throw error if password column is detected in SQL report	2024-08-16 16:22:23 +02:00
Search
Serials
SIP	Bug 28924: (QA follow-up) Use $self instead of $patron	2024-07-18 18:25:55 +02:00
Utils/DataTables
Accounts.pm
Acquisition.pm	Bug 36002: Remove unused subroutine GetParcels	2024-04-30 17:09:43 +02:00
Auth.pm	Bug 37104: (Follow-up) Checks for unitialized value of 'anonymous_patron' system pref	2024-08-16 16:22:19 +02:00
Auth_cas_servers.yaml.sample
Auth_with_cas.pm
Auth_with_ldap.pm	Bug 36575: (bug 34893 follow-up) Return patron from LDAP	2024-06-20 17:55:32 +02:00
Auth_with_shibboleth.pm	Bug 36575: (QA follow-up) Shibboleth POD and checkpw_internal call	2024-06-20 17:55:34 +02:00
AuthoritiesMarc.pm	Bug 35989: (QA follow-up): Fix QA tests	2024-06-06 15:18:43 +01:00
Barcodes.pm
Biblio.pm	Bug 36137: Make update_totalissues cron always skip the holds queue	2024-05-03 18:02:15 +02:00
Breeding.pm
Budgets.pm
Calendar.pm
Charset.pm
Circulation.pm	Bug 28924: (QA follow-up) Terminology fixes	2024-07-18 18:25:57 +02:00
ClassSortRoutine.pm
ClassSource.pm
ClassSplitRoutine.pm
Context.pm	Bug 36367: Set to undef when unsetting	2024-06-14 11:17:18 +01:00
Contract.pm
CourseReserves.pm
Creators.pm
Heading.pm	Bug 30047: (follow-up) Fix failing tests	2024-05-13 16:24:18 +02:00
HoldsQueue.pm	Bug 32565: (follow-up) Tidy	2024-04-30 14:32:07 +02:00
HTML5Media.pm
ImportBatch.pm
ImportExportFramework.pm
InstallAuth.pm	Bug 36367: Remove _new_userenv	2024-06-14 11:17:17 +01:00
Installer.pm
ItemCirculationAlertPreference.pm
Items.pm	Bug 37249: Disambiguate itemnumber with USING clause	2024-07-05 15:48:06 +02:00
Koha.pm	Bug 36750: Use the same label for Zebra	2024-05-07 17:41:19 +02:00
Labels.pm
Languages.pm	Bug 35582: Supress possible warning	2024-04-29 18:53:13 +02:00
Letters.pm	Bug 36758: (follow-up) Fix unit tests	2024-08-12 14:01:08 +02:00
Linker.pm
Log.pm	Bug 25159: (QA follow-up) Tidy changes	2024-05-02 16:47:44 +02:00
MarcModificationTemplates.pm
Matcher.pm
Members.pm	Bug 28924: (QA follow-up) Use $self instead of $patron	2024-07-18 18:25:55 +02:00
Message.pm
Output.pm
Overdues.pm	Bug 36128: Use of uninitialized value in string eq at /usr/share/koha/lib/C4/Overdues.pm	2024-06-27 14:04:46 +02:00
Patroncards.pm
Record.pm
Reports.pm
Reserves.pm	Bug 35959: Fix C3 merge of Koha::Old::Hold	2024-07-05 15:48:04 +02:00
Ris.pm
RotatingCollections.pm
Scheduler.pm
Scrubber.pm
Search.pm	Bug 35138: Add the ability to manage ES facets	2024-04-30 12:00:56 +02:00
Serials.pm	Bug 37476: Fix reserved word error on Serials.pm on MySQL 8	2024-07-26 14:50:45 +01:00
Service.pm
ShelfBrowser.pm
SMS.pm
SocialData.pm
Stats.pm
Suggestions.pm	Bug 35597: Move modification logging to Koha::Suggestion	2024-06-13 14:08:33 +01:00
Tags.pm	Bug 36785: Typo unreconized and bilbio in tags code	2024-05-17 10:36:35 +02:00
Templates.pm
TmplToken.pm
TmplTokenType.pm
TTParser.pm
UsageStats.pm	Bug 26176: (QA follow-up) Branch -> Library	2024-05-23 17:51:18 +02:00
XISBN.pm
XSLT.pm