Bugzilla – Attachment 167708 Details for
Bug 37074
Comment approval and un-approval should be CSRF-protected
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 37074: Do no pass biblionumber
Bug-37074-Do-no-pass-biblionumber.patch (text/plain), 2.50 KB, created by
Jonathan Druart
on 2024-06-14 07:27:43 UTC
(
hide
)
Description:
Bug 37074: Do no pass biblionumber
Filename:
MIME Type:
Creator:
Jonathan Druart
Created:
2024-06-14 07:27:43 UTC
Size:
2.50 KB
patch
obsolete
>From c5123a56acb3d48a76f8a7838118a4f6d8cf3ba7 Mon Sep 17 00:00:00 2001 >From: Jonathan Druart <jonathan.druart@bugs.koha-community.org> >Date: Fri, 14 Jun 2024 09:26:53 +0200 >Subject: [PATCH] Bug 37074: Do no pass biblionumber > >It is not used in the controller > >Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org> >--- > .../intranet-tmpl/prog/en/modules/reviews/reviewswaiting.tt | 3 --- > 1 file changed, 3 deletions(-) > >diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/reviews/reviewswaiting.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/reviews/reviewswaiting.tt >index ef991d33c71..eb15af3d65c 100644 >--- a/koha-tmpl/intranet-tmpl/prog/en/modules/reviews/reviewswaiting.tt >+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/reviews/reviewswaiting.tt >@@ -101,7 +101,6 @@ > <form action="/cgi-bin/koha/reviews/reviewswaiting.pl" method="post"> > [% INCLUDE 'csrf-token.inc' %] > <input type="hidden" name="op" value="cud-unapprove" /> >- <input type="hidden" name="biblionumber" value="[% biblionumber | html %]" /> > <input type="hidden" name="reviewid" value="[% review.reviewid | html %]" /> > <button type="submit" class="btn btn-default btn-xs"><i class="fa fa-times" aria-hidden="true"></i> Unapprove</button> > </form> >@@ -109,7 +108,6 @@ > <form action="/cgi-bin/koha/reviews/reviewswaiting.pl" method="post"> > [% INCLUDE 'csrf-token.inc' %] > <input type="hidden" name="op" value="cud-approve" /> >- <input type="hidden" name="biblionumber" value="[% biblionumber | html %]" /> > <input type="hidden" name="reviewid" value="[% review.reviewid | html %]" /> > <button type="submit" class="btn btn-default btn-xs"><i class="fa fa-check" aria-hidden="true"></i> Approve</button> > </form> >@@ -117,7 +115,6 @@ > <form action="/cgi-bin/koha/reviews/reviewswaiting.pl" method="post"> > [% INCLUDE 'csrf-token.inc' %] > <input type="hidden" name="op" value="cud-delete" /> >- <input type="hidden" name="biblionumber" value="[% biblionumber | html %]" /> > <input type="hidden" name="reviewid" value="[% review.reviewid | html %]" /> > <button type="submit" class="btn btn-default btn-xs delete-comment"><i class="fa fa-trash-can" aria-hidden="true"></i> Delete</button> > </form> >-- >2.34.1
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 37074
:
167671
|
167702
|
167707
| 167708