Bugzilla – Attachment 64068 Details for
Bug 18740
[16.05.12-16.05.13] Cannot modify patron password
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 18740: (bug 16992 follow-up) Add CSRF token to the template
Bug-18740-bug-16992-follow-up-Add-CSRF-token-to-th.patch (text/plain), 1.64 KB, created by
Tomás Cohen Arazi
on 2017-06-06 19:56:11 UTC
(
hide
)
Description:
Bug 18740: (bug 16992 follow-up) Add CSRF token to the template
Filename:
MIME Type:
Creator:
Tomás Cohen Arazi
Created:
2017-06-06 19:56:11 UTC
Size:
1.64 KB
patch
obsolete
>From c61a1adf8beb1bef1f9858c60edfc6ddb7f73e12 Mon Sep 17 00:00:00 2001 >From: Jonathan Druart <jonathan.druart@bugs.koha-community.org> >Date: Tue, 6 Jun 2017 16:41:37 -0300 >Subject: [PATCH] Bug 18740: (bug 16992 follow-up) Add CSRF token to the > template > >Bug 16992 is in > commit 9e74db7b51085f62919e34ab4e5ccdf9da2066a1 > Bug 18124: Restrict CSRF token to user's session > >but template change is missing > >Test plan: >Modify a patron from member-password.pl >Without this patch you got > Wrong CSRF token at /home/vagrant/kohaclone/members/member-password.pl line 68. > >Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io> >Patch fixes the bug. Passes the qa script. >--- > koha-tmpl/intranet-tmpl/prog/en/modules/members/member-password.tt | 6 +++++- > 1 file changed, 5 insertions(+), 1 deletion(-) > >diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/members/member-password.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/members/member-password.tt >index 5d55ef5..786125e 100644 >--- a/koha-tmpl/intranet-tmpl/prog/en/modules/members/member-password.tt >+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/members/member-password.tt >@@ -114,7 +114,11 @@ > </li> > </ol> > </fieldset> >- <fieldset class="action"><input type="submit" value="Save" /> <a class="cancel" href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% borrowernumber %]">Cancel</a></fieldset> >+ <fieldset class="action"> >+ <input type="hidden" name="csrf_token" value="[% csrf_token %]" /> >+ <input type="submit" value="Save" /> >+ <a class="cancel" href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% borrowernumber %]">Cancel</a> >+ </fieldset> > </form>[% END %] > > </div> >-- >2.7.4
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 18740
:
64067
| 64068 |
64254