https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12620

--- Comment #18 from David Cook <[email protected]> ---
Sorry to do this to you, but looking at this again through a security lens...
this should be a koha-conf.xml config option rather than a system preference.

Using a system preference would open up Koha to situations where a person puts
in a proxy they control.

The damage would probably be fairly limited. Mostly leaking of Z39.50/SRU
credentials and potentially injection of payloads into retrieved records
(although I'd hope that the cataloguer would review the records and identify
any malicious data before importing).

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to