Bugzilla – Attachment 166725 Details for
Bug 36414
Consequent workflow stages form submit fail due to CSRF token conflict
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 36414: Staff UI - Skip csrf_token
Bug-36414-Staff-UI---Skip-csrftoken.patch (text/plain), 2.15 KB, created by
Nick Clemens (kidclamp)
on 2024-05-14 18:33:26 UTC
(
hide
)
Description:
Bug 36414: Staff UI - Skip csrf_token
Filename:
MIME Type:
Creator:
Nick Clemens (kidclamp)
Created:
2024-05-14 18:33:26 UTC
Size:
2.15 KB
patch
obsolete
>From c31a2a91033aebdd27e92bb7f5c70234cb07a126 Mon Sep 17 00:00:00 2001 >From: Pedro Amorim <pedro.amorim@ptfs-europe.com> >Date: Mon, 25 Mar 2024 10:23:37 +0000 >Subject: [PATCH] Bug 36414: Staff UI - Skip csrf_token > >Skip csrf_token field if it already exists and >is coming from a previous workflow stage form >submission, as it's already included at the >start of the form. > >Signed-off-by: Nick Clemens <nick@bywatersolutions.com> >--- > koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > >diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt >index 49ee2e82673..f97a00563d5 100644 >--- a/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt >+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/ill/ill-requests.tt >@@ -862,7 +862,7 @@ > [% INCLUDE 'csrf-token.inc' %] > [% FOREACH key IN whole.keys %] > [% value = whole.$key %] >- [% IF key != 'op' && key != 'method' && key != 'custom_key' && key != 'custom_value' %] >+ [% IF key != 'op' && key != 'method' && key != 'custom_key' && key != 'custom_value' && key != 'csrf_token' %] > <input type="hidden" name="[% key | html %]" value="[% value | html %]"> > [% END %] > [% END %] >@@ -909,7 +909,7 @@ > <fieldset class="action"> > [% FOREACH key IN whole.keys %] > [% value = whole.$key %] >- [% IF key != 'op' && key != 'method' && key != 'custom_key' && key != 'custom_value' %] >+ [% IF key != 'op' && key != 'method' && key != 'custom_key' && key != 'custom_value' && key != 'csrf_token' %] > <input type="hidden" name="[% key | html %]" value="[% value | html %]"> > [% END %] > [% END %] >-- >2.39.2
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 36414
:
163785
|
163786
| 166725 |
166726