Bugzilla – Attachment 95384 Details for
Bug 22990
Add CSRF protection to boraccount, pay, suggestions and virtualshelves on staff
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 22990: Test if 'check' is passed and mimick existing pattern
Bug-22990-Test-if-check-is-passed-and-mimick-exist.patch (text/plain), 1.42 KB, created by
Jonathan Druart
on 2019-11-13 13:42:32 UTC
(
hide
)
Description:
Bug 22990: Test if 'check' is passed and mimick existing pattern
Filename:
MIME Type:
Creator:
Jonathan Druart
Created:
2019-11-13 13:42:32 UTC
Size:
1.42 KB
patch
obsolete
>From 6820be912d264fbcc8dc9bf2a4233c6aeba51e7b Mon Sep 17 00:00:00 2001 >From: Jonathan Druart <jonathan.druart@bugs.koha-community.org> >Date: Fri, 31 May 2019 12:13:06 -0500 >Subject: [PATCH] Bug 22990: Test if 'check' is passed and mimick existing > pattern > >To ease future addition of checks >--- > C4/Output.pm | 18 ++++++++++-------- > 1 file changed, 10 insertions(+), 8 deletions(-) > >diff --git a/C4/Output.pm b/C4/Output.pm >index 3b42bfe14a..39fbfb0d89 100644 >--- a/C4/Output.pm >+++ b/C4/Output.pm >@@ -347,14 +347,16 @@ sub output_and_exit_if_error { > $error = 'unknown_biblio' unless $params->{record}; > } > } >- elsif ( $params->{check} eq 'csrf_token' ) { >- $error = 'wrong_csrf_token' >- unless Koha::Token->new->check_csrf( >- { >- session_id => scalar $query->cookie('CGISESSID'), >- token => scalar $query->param('csrf_token'), >- } >- ); >+ elsif ( $params and exists $params->{check} ) { >+ if ( $params->{check} eq 'csrf_token' ) { >+ $error = 'wrong_csrf_token' >+ unless Koha::Token->new->check_csrf( >+ { >+ session_id => scalar $query->cookie('CGISESSID'), >+ token => scalar $query->param('csrf_token'), >+ } >+ ); >+ } > } > output_and_exit( $query, $cookie, $template, $error ) if $error; > return; >-- >2.11.0
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 22990
:
90102
|
90192
|
90194
|
90202
|
90204
|
90209
|
90238
|
90239
|
90240
|
95381
|
95382
|
95383
|
95384
|
95385
|
95391
|
95392
|
95393
|
95394
|
95395
|
95396
|
97814
|
122010
|
122011
|
122012
|
122013
|
122014
|
122015
|
122016
|
122023
|
122024
|
122025
|
122026
|
122027
|
122028
|
122029
|
122030
|
122031
|
122046
|
124924
|
124925
|
124926
|
124927
|
124928
|
124929
|
124930
|
124931
|
124932
|
124933
|
124934
|
126091
|
126092
|
126093
|
126094
|
126095
|
126096
|
126097
|
126098
|
126099
|
126100
|
126101
|
133238
|
133239
|
133240
|
133241
|
133242
|
133243
|
133244
|
133245
|
133246
|
133247
|
133248
|
133254
|
133255
|
133256
|
133257
|
133258
|
133422
|
133423
|
133424
|
133425
|
133426
|
133427
|
134848
|
134849
|
134850
|
134851
|
134852
|
134853
|
134854
|
141294
|
141295
|
141296
|
144315
|
144316
|
144317
|
144318
|
144319
|
144320
|
144321
|
144322
|
152626
|
152627
|
152628
|
153394
|
153751
|
153753
|
154044