View | Details | Raw Unified | Return to bug 37056
Collapse All | Expand All

(-)a/errors/403.pl (-3 / +4 lines)
Lines 33-41 my ( $template, $loggedinuser, $cookie ) = get_template_and_user( Link Here
33
        authnotrequired => 1,
33
        authnotrequired => 1,
34
    }
34
    }
35
);
35
);
36
$template->param (
36
$template->param(
37
    admin => $admin,
37
    admin      => $admin,
38
    errno => 403,
38
    errno      => 403,
39
    nocsrf     => 1,
39
    csrf_error => $ENV{'plack.middleware.Koha.CSRF'},
40
    csrf_error => $ENV{'plack.middleware.Koha.CSRF'},
40
);
41
);
41
42
(-)a/koha-tmpl/intranet-tmpl/prog/en/includes/doc-head-close.inc (-1 / +3 lines)
Lines 6-12 Link Here
6
[% PROCESS 'html_helpers.inc' %]
6
[% PROCESS 'html_helpers.inc' %]
7
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
7
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
8
<meta name="viewport" content="width=device-width, initial-scale=1" />
8
<meta name="viewport" content="width=device-width, initial-scale=1" />
9
<meta name="csrf-token" content="[% Koha.GenerateCSRF | $raw %]">
9
[% UNLESS nocsrf %]
10
    <meta name="csrf-token" content="[% Koha.GenerateCSRF | $raw %]">
11
[% END %]
10
[% IF logged_in_user %]<meta name="generator" content="Koha [% Koha.Version.maintenance | html %]" />[% END %]
12
[% IF logged_in_user %]<meta name="generator" content="Koha [% Koha.Version.maintenance | html %]" />[% END %]
11
[%# Prevent XFS attacks -%]
13
[%# Prevent XFS attacks -%]
12
[% UNLESS popup %]
14
[% UNLESS popup %]
(-)a/svc/report (-2 / +1 lines)
Lines 46-52 my @param_names = $query->multi_param('param_names'); Link Here
46
46
47
my ($status, $cookie, $sessionID) = check_api_auth($query, { catalogue => '1'} );
47
my ($status, $cookie, $sessionID) = check_api_auth($query, { catalogue => '1'} );
48
unless ($status eq "ok") {
48
unless ($status eq "ok") {
49
    print $query->header(-type => 'application/json', -charset => 'UTF-8');
49
    print $query->header(-type => 'application/json', -status => '403 Forbidden');
50
    print to_json({ auth_status => $status });
50
    print to_json({ auth_status => $status });
51
    exit 0;
51
    exit 0;
52
}
52
}
53
- 

Return to bug 37056