Attachment 165745 Details for Bug 36700 – Bug 36700: Fix CSRF-TOKEN header in image upload

[patch] Bug 36700: Fix CSRF-TOKEN header in image upload

Bug-36700-Fix-CSRF-TOKEN-header-in-image-upload.patch (text/plain), 1.17 KB, created by Marcel de Rooy on 2024-04-29 13:16:23 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Marcel de Rooy

Created: 2024-04-29 13:16:23 UTC

Size: 1.17 KB

patch

obsolete

>From 55e76b8d390fb396502520378785719c12dca5d9 Mon Sep 17 00:00:00 2001
>From: David Cook <dcook@prosentient.com.au>
>Date: Mon, 29 Apr 2024 01:36:02 +0000
>Subject: [PATCH] Bug 36700: Fix CSRF-TOKEN header in image upload
>Content-Type: text/plain; charset=utf-8
>
>Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
>---
> koha-tmpl/intranet-tmpl/prog/js/upload-images.js | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
>diff --git a/koha-tmpl/intranet-tmpl/prog/js/upload-images.js b/koha-tmpl/intranet-tmpl/prog/js/upload-images.js
>index b2349a55ef..c81a75d9d3 100644
>--- a/koha-tmpl/intranet-tmpl/prog/js/upload-images.js
>+++ b/koha-tmpl/intranet-tmpl/prog/js/upload-images.js
>@@ -124,7 +124,7 @@ function AjaxUpload ( formData, progressbar, xtra, callback ) {
>     progressbar.val( 0 );
>     progressbar.next('.fileuploadpercent').text( '0' );
>     xhr.open('POST', url, true);
>-    xhr.setRequestHeader("csrf_token", $('meta[name="csrf-token"]').attr("content"));
>+    xhr.setRequestHeader("CSRF-TOKEN", $('meta[name="csrf-token"]').attr("content"));
>     xhr.upload.onprogress = function (e) {
>         var p = Math.round( (e.loaded/e.total) * 100 );
>         progressbar.val( p );
>-- 
>2.30.2

Actions: View | Diff | Splinter Review

Attachments on bug 36700: 165537 | 165618 | 165715 | 165716 | 165744 | 165745 | 165962 | 165963 | 165964