Bugzilla – Attachment 181549 Details for
Bug 38340
Translatability - Standard form include files are not translatable
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 38340: (follow-up) Fix CSRF issues
Bug-38340-follow-up-Fix-CSRF-issues.patch (text/plain), 2.87 KB, created by
Tomás Cohen Arazi (tcohen)
on 2025-04-25 16:51:19 UTC
(
hide
)
Description:
Bug 38340: (follow-up) Fix CSRF issues
Filename:
MIME Type:
Creator:
Tomás Cohen Arazi (tcohen)
Created:
2025-04-25 16:51:19 UTC
Size:
2.87 KB
patch
obsolete
>From bdeec576dda1aaffe239f94c9ba49e26fbebc6c9 Mon Sep 17 00:00:00 2001 >From: Tomas Cohen Arazi <tomascohen@theke.io> >Date: Fri, 25 Apr 2025 13:50:16 -0300 >Subject: [PATCH] Bug 38340: (follow-up) Fix CSRF issues > >Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io> >--- > .../prog/en/includes/ill/backends/Standard/create.inc | 3 +++ > .../prog/en/includes/ill/backends/Standard/migrate.inc | 2 ++ > 2 files changed, 5 insertions(+) > >diff --git a/koha-tmpl/intranet-tmpl/prog/en/includes/ill/backends/Standard/create.inc b/koha-tmpl/intranet-tmpl/prog/en/includes/ill/backends/Standard/create.inc >index 01c2d5a7169..bb02161d3bd 100644 >--- a/koha-tmpl/intranet-tmpl/prog/en/includes/ill/backends/Standard/create.inc >+++ b/koha-tmpl/intranet-tmpl/prog/en/includes/ill/backends/Standard/create.inc >@@ -112,6 +112,7 @@ > <input type="hidden" name="method" value="create" /> > <input type="hidden" name="stage" value="form" /> > <input type="hidden" name="backend" value="Standard" /> >+ <input type="hidden" name="op" value="cud-create" /> > </form> > [% BLOCK backend_jsinclude %] > <script> >@@ -168,6 +169,7 @@ > <!-- We need to clarify the borrower that has been requested. --> > <h2>Borrower selection</h2> > <form method="POST" action=""> >+ [% INCLUDE 'csrf-token.inc' %] > [% FOREACH prop IN whole.value.other.keys %] > [% IF prop != 'custom_key' && prop != 'custom_value' && prop != 'cardnumber' %] > <input type="hidden" name="[% prop | html %]" value="[% whole.value.other.$prop | html %]" /> >@@ -203,6 +205,7 @@ > <input type="submit" value="Select" /> > <a class="cancel" href="[% parent | url %]">Cancel</a> > </fieldset> >+ <input type="hidden" name="op" value="cud-choose-borrower" /> > </form> > [% ELSE %] > <p>Unknown stage. This should not have happened. </p> >diff --git a/koha-tmpl/intranet-tmpl/prog/en/includes/ill/backends/Standard/migrate.inc b/koha-tmpl/intranet-tmpl/prog/en/includes/ill/backends/Standard/migrate.inc >index 180c2d9f1b8..5a133a9c2fa 100644 >--- a/koha-tmpl/intranet-tmpl/prog/en/includes/ill/backends/Standard/migrate.inc >+++ b/koha-tmpl/intranet-tmpl/prog/en/includes/ill/backends/Standard/migrate.inc >@@ -16,6 +16,7 @@ > [% IF whole.stage == "form" %] > <h2>Migrating an ILL request</h2> > <form id="standard_migrate_form" method="POST" action=""> >+ [% INCLUDE 'csrf-token.inc' %] > <fieldset class="rows"> > <legend>General details</legend> > <ol id="general-standard-fields"> >@@ -104,6 +105,7 @@ > <input id="ill-submit" type="submit" value="Migrate" /> > <a class="cancel" href="/cgi-bin/koha/ill/ill-requests.pl">Cancel</a> > </fieldset> >+ <input type="hidden" name="op" value="cud-migrate" /> > </form> > [% BLOCK backend_jsinclude %] > <script> >-- >2.49.0
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 38340
:
177749
|
177750
|
178057
|
178058
|
178079
|
178080
|
178414
|
178415
|
178416
|
178418
|
178420
|
178421
|
178422
|
180066
|
180067
|
180068
|
181215
|
181216
|
181217
|
181294
|
181391
|
181392
|
181435
|
181541
|
181542
|
181543
|
181544
| 181549