From fc709fd69d4a4b39f763b44b8b367cf47d72e6c0 Mon Sep 17 00:00:00 2001 From: Jonathan Druart Date: Fri, 4 Aug 2023 11:28:53 +0200 Subject: [PATCH] Bug 34478: Add missing CSRF token to POST forms This is the result of % perl csrf_add_missing_csrf.pl --- .../prog/en/includes/acquisitions-search.inc | 2 ++ .../prog/en/includes/acquisitions-toolbar.inc | 1 + .../prog/en/includes/budgets-admin-search.inc | 1 + .../prog/en/includes/checkin-search-box.inc | 1 + .../prog/en/includes/checkouts-table.inc | 1 + .../intranet-tmpl/prog/en/includes/circ-menu.inc | 2 ++ .../prog/en/includes/cities-admin-search.inc | 1 + .../prog/en/includes/contracts-admin-search.inc | 1 + .../prog/en/includes/currencies-admin-search.inc | 1 + .../prog/en/includes/desks-admin-search.inc | 1 + .../prog/en/includes/letters-search.inc | 1 + .../prog/en/includes/mana/mana-share-report.inc | 1 + .../prog/en/includes/member-search-box.inc | 1 + .../prog/en/includes/members-toolbar.inc | 1 + .../en/includes/modals/cataloguing_create_av.inc | 1 + .../includes/modals/serials_multi_receiving.inc | 1 + .../prog/en/includes/patron-detail-tabs.inc | 3 +++ .../prog/en/includes/patron-restrictions-tab.inc | 1 + .../prog/en/includes/patron-search-box.inc | 1 + .../prog/en/includes/patron_messages.inc | 1 + .../prog/en/includes/patrons-admin-search.inc | 1 + .../prog/en/includes/renew-search-box.inc | 1 + .../prog/en/includes/virtualshelves-toolbar.inc | 1 + .../prog/en/includes/waiting_holds.inc | 1 + .../prog/en/includes/z3950-admin-search.inc | 1 + .../prog/en/modules/acqui/acqui-home.tt | 1 + .../prog/en/modules/acqui/addorder.tt | 1 + .../prog/en/modules/acqui/addorderiso2709.tt | 1 + .../prog/en/modules/acqui/basket.tt | 6 ++++++ .../prog/en/modules/acqui/basketgroup.tt | 1 + .../prog/en/modules/acqui/basketheader.tt | 1 + .../prog/en/modules/acqui/cancelorder.tt | 1 + .../prog/en/modules/acqui/duplicate_orders.tt | 3 +++ .../prog/en/modules/acqui/histsearch.tt | 1 + .../prog/en/modules/acqui/invoice-files.tt | 1 + .../prog/en/modules/acqui/invoice.tt | 2 ++ .../prog/en/modules/acqui/invoices.tt | 1 + .../prog/en/modules/acqui/lateorders.tt | 3 +++ .../prog/en/modules/acqui/moddeliverydate.tt | 1 + .../prog/en/modules/acqui/modordernotes.tt | 1 + .../prog/en/modules/acqui/neworderempty.tt | 2 ++ .../prog/en/modules/acqui/supplier.tt | 1 + .../prog/en/modules/acqui/uncertainprice.tt | 2 ++ .../prog/en/modules/acqui/vendor_issues.tt | 2 ++ .../prog/en/modules/acqui/z3950_search.tt | 2 ++ .../prog/en/modules/admin/additional-fields.tt | 1 + .../prog/en/modules/admin/admin-home.tt | 1 + .../prog/en/modules/admin/adveditorshortcuts.tt | 1 + .../prog/en/modules/admin/aqbudgetperiods.tt | 5 +++++ .../prog/en/modules/admin/aqbudgets.tt | 2 ++ .../prog/en/modules/admin/aqcontract.tt | 4 ++++ .../prog/en/modules/admin/aqplan.tt | 3 +++ .../prog/en/modules/admin/audio_alerts.tt | 2 ++ .../en/modules/admin/auth_subfields_structure.tt | 2 ++ .../prog/en/modules/admin/auth_tag_structure.tt | 5 +++++ .../prog/en/modules/admin/authorised_values.tt | 2 ++ .../prog/en/modules/admin/authtypes.tt | 3 +++ .../prog/en/modules/admin/biblio_framework.tt | 4 ++++ .../en/modules/admin/branch_transfer_limits.tt | 1 + .../prog/en/modules/admin/branches.tt | 2 ++ .../prog/en/modules/admin/cash_registers.tt | 1 + .../prog/en/modules/admin/categories.tt | 2 ++ .../prog/en/modules/admin/cities.tt | 2 ++ .../prog/en/modules/admin/classsources.tt | 3 +++ .../prog/en/modules/admin/clone-rules.tt | 1 + .../prog/en/modules/admin/columns_settings.tt | 1 + .../prog/en/modules/admin/credit_types.tt | 1 + .../prog/en/modules/admin/curbside_pickup.tt | 1 + .../prog/en/modules/admin/currency.tt | 4 ++++ .../prog/en/modules/admin/debit_types.tt | 1 + .../intranet-tmpl/prog/en/modules/admin/desks.tt | 2 ++ .../prog/en/modules/admin/didyoumean.tt | 1 + .../prog/en/modules/admin/edi_accounts.tt | 2 ++ .../prog/en/modules/admin/edi_ean_accounts.tt | 2 ++ .../modules/admin/identity_provider_domains.tt | 2 ++ .../prog/en/modules/admin/identity_providers.tt | 2 ++ .../prog/en/modules/admin/items_search_field.tt | 1 + .../prog/en/modules/admin/items_search_fields.tt | 1 + .../prog/en/modules/admin/itemtypes.tt | 3 +++ .../prog/en/modules/admin/koha2marclinks.tt | 1 + .../prog/en/modules/admin/localization.tt | 1 + .../prog/en/modules/admin/marc-overlay-rules.tt | 2 ++ .../en/modules/admin/marc_subfields_structure.tt | 3 +++ .../prog/en/modules/admin/marctagstructure.tt | 5 +++++ .../prog/en/modules/admin/matching-rules.tt | 2 ++ .../prog/en/modules/admin/oai_set_mappings.tt | 1 + .../prog/en/modules/admin/oai_sets.tt | 1 + .../prog/en/modules/admin/overdrive.tt | 1 + .../prog/en/modules/admin/patron-attr-types.tt | 2 ++ .../prog/en/modules/admin/preferences.tt | 1 + .../prog/en/modules/admin/restrictions.tt | 2 ++ .../admin/searchengine/elasticsearch/mappings.tt | 3 +++ .../prog/en/modules/admin/share_content.tt | 3 +++ .../prog/en/modules/admin/smart-rules.tt | 9 +++++++++ .../prog/en/modules/admin/sms_providers.tt | 1 + .../prog/en/modules/admin/smtp_servers.tt | 2 ++ .../prog/en/modules/admin/sru_modmapping.tt | 1 + .../prog/en/modules/admin/sru_modmapping_auth.tt | 1 + .../prog/en/modules/admin/systempreferences.tt | 5 +++++ .../en/modules/admin/transport-cost-matrix.tt | 1 + .../prog/en/modules/admin/usage_statistics.tt | 1 + .../prog/en/modules/admin/z3950servers.tt | 1 + koha-tmpl/intranet-tmpl/prog/en/modules/auth.tt | 2 ++ .../prog/en/modules/authorities/authorities.tt | 1 + .../prog/en/modules/authorities/merge.tt | 2 ++ .../prog/en/modules/basket/downloadcart.tt | 1 + .../prog/en/modules/basket/sendbasketform.tt | 1 + .../prog/en/modules/catalogue/moredetail.tt | 6 ++++++ .../prog/en/modules/catalogue/results.tt | 1 + .../prog/en/modules/catalogue/search-history.tt | 4 ++++ .../prog/en/modules/catalogue/stockrotation.tt | 1 + .../prog/en/modules/cataloguing/addbiblio.tt | 1 + .../prog/en/modules/cataloguing/additem.tt | 1 + .../prog/en/modules/cataloguing/linkitem.tt | 3 +++ .../prog/en/modules/cataloguing/merge.tt | 2 ++ .../prog/en/modules/cataloguing/moveitem.tt | 2 ++ .../value_builder/marc21_linking_section.tt | 1 + .../value_builder/unimarc_field_210c.tt | 1 + .../value_builder/unimarc_field_4XX.tt | 1 + .../en/modules/cataloguing/z3950_auth_search.tt | 2 ++ .../prog/en/modules/cataloguing/z3950_search.tt | 2 ++ .../prog/en/modules/circ/article-requests.tt | 1 + .../prog/en/modules/circ/branchoverdues.tt | 1 + .../prog/en/modules/circ/branchtransfers.tt | 4 ++++ .../prog/en/modules/circ/checkout-notes.tt | 1 + .../prog/en/modules/circ/circulation.tt | 4 ++++ .../modules/circ/circulation_batch_checkouts.tt | 2 ++ .../prog/en/modules/circ/curbside_pickups.tt | 10 ++++++++++ .../prog/en/modules/circ/overdue.tt | 1 + .../prog/en/modules/circ/pendingreserves.tt | 3 +++ .../intranet-tmpl/prog/en/modules/circ/renew.tt | 9 +++++++++ .../prog/en/modules/circ/request-article.tt | 1 + .../prog/en/modules/circ/reserveratios.tt | 1 + .../prog/en/modules/circ/returns.tt | 10 ++++++++++ .../prog/en/modules/circ/set-library.tt | 2 ++ .../prog/en/modules/circ/waitingreserves.tt | 3 +++ .../prog/en/modules/clubs/clubs-add-modify.tt | 1 + .../en/modules/clubs/templates-add-modify.tt | 1 + .../modules/course_reserves/add_items-step1.tt | 1 + .../modules/course_reserves/add_items-step2.tt | 1 + .../modules/course_reserves/batch_add_items.tt | 1 + .../en/modules/course_reserves/batch_rm_items.tt | 1 + .../prog/en/modules/course_reserves/course.tt | 1 + .../prog/en/modules/ill/ill-requests.tt | 7 +++++++ .../prog/en/modules/installer/auth.tt | 1 + .../prog/en/modules/installer/step1.tt | 1 + .../prog/en/modules/installer/step2.tt | 2 ++ .../prog/en/modules/installer/step3.tt | 6 ++++++ .../prog/en/modules/labels/barcode-print.tt | 1 + .../prog/en/modules/labels/label-bib-search.tt | 1 + .../prog/en/modules/labels/label-edit-batch.tt | 1 + .../prog/en/modules/labels/label-edit-range.tt | 1 + .../prog/en/modules/labels/label-print.tt | 1 + .../prog/en/modules/labels/search.tt | 1 + .../prog/en/modules/labels/spinelabel-home.tt | 1 + .../prog/en/modules/members/apikeys.tt | 3 +++ .../prog/en/modules/members/boraccount.tt | 1 + .../prog/en/modules/members/discharge.tt | 1 + .../prog/en/modules/members/files.tt | 1 + .../prog/en/modules/members/housebound.tt | 2 ++ .../prog/en/modules/members/mancredit.tt | 1 + .../prog/en/modules/members/maninvoice.tt | 1 + .../prog/en/modules/members/member-password.tt | 1 + .../prog/en/modules/members/member.tt | 1 + .../prog/en/modules/members/memberentrygen.tt | 1 + .../prog/en/modules/members/members-update.tt | 1 + .../prog/en/modules/members/notices.tt | 1 + .../intranet-tmpl/prog/en/modules/members/pay.tt | 1 + .../prog/en/modules/members/paycollect.tt | 6 +++--- .../prog/en/modules/members/update-child.tt | 1 + .../prog/en/modules/offline_circ/process_koc.tt | 3 +++ .../en/modules/onboarding/onboardingstep1.tt | 1 + .../en/modules/onboarding/onboardingstep2.tt | 1 + .../en/modules/onboarding/onboardingstep3.tt | 1 + .../en/modules/onboarding/onboardingstep4.tt | 1 + .../en/modules/onboarding/onboardingstep5.tt | 1 + .../prog/en/modules/patron_lists/add-modify.tt | 1 + .../prog/en/modules/patron_lists/list.tt | 2 ++ .../prog/en/modules/patroncards/edit-batch.tt | 1 + .../prog/en/modules/patroncards/edit-layout.tt | 1 + .../prog/en/modules/patroncards/edit-profile.tt | 1 + .../prog/en/modules/patroncards/edit-template.tt | 1 + .../prog/en/modules/patroncards/image-manage.tt | 2 ++ .../prog/en/modules/patroncards/print.tt | 1 + .../prog/en/modules/plugins/plugins-upload.tt | 1 + .../intranet-tmpl/prog/en/modules/pos/pay.tt | 2 ++ .../prog/en/modules/pos/register.tt | 2 ++ .../prog/en/modules/pos/registers.tt | 1 + .../prog/en/modules/recalls/recalls_overdue.tt | 1 + .../prog/en/modules/recalls/recalls_queue.tt | 1 + .../prog/en/modules/recalls/recalls_to_pull.tt | 1 + .../prog/en/modules/recalls/recalls_waiting.tt | 2 ++ .../prog/en/modules/recalls/request.tt | 1 + .../en/modules/reports/acquisitions_stats.tt | 1 + .../prog/en/modules/reports/bor_issues_top.tt | 1 + .../prog/en/modules/reports/borrowers_out.tt | 1 + .../prog/en/modules/reports/borrowers_stats.tt | 1 + .../en/modules/reports/cash_register_stats.tt | 1 + .../prog/en/modules/reports/cat_issues_top.tt | 1 + .../prog/en/modules/reports/catalogue_out.tt | 1 + .../prog/en/modules/reports/catalogue_stats.tt | 1 + .../prog/en/modules/reports/dictionary.tt | 6 ++++++ .../en/modules/reports/guided_reports_start.tt | 16 ++++++++++++++++ .../prog/en/modules/reports/issues_avg_stats.tt | 1 + .../prog/en/modules/reports/issues_stats.tt | 1 + .../prog/en/modules/reports/itemslost.tt | 1 + .../prog/en/modules/reports/itemtypes.tt | 1 + .../prog/en/modules/reports/orders_by_budget.tt | 1 + .../prog/en/modules/reports/reserves_stats.tt | 1 + .../prog/en/modules/reports/serials_stats.tt | 1 + .../prog/en/modules/reserve/request.tt | 5 +++++ .../en/modules/rotating_collections/addItems.tt | 1 + .../rotating_collections/editCollections.tt | 1 + .../rotating_collections/transferCollection.tt | 1 + .../prog/en/modules/serials/acqui-search.tt | 1 + .../prog/en/modules/serials/claims.tt | 2 ++ .../prog/en/modules/serials/routing-preview.tt | 1 + .../prog/en/modules/serials/routing.tt | 1 + .../en/modules/serials/serials-collection.tt | 1 + .../prog/en/modules/serials/serials-edit.tt | 1 + .../prog/en/modules/serials/serials-search.tt | 1 + .../prog/en/modules/serials/subscription-add.tt | 1 + .../en/modules/serials/subscription-batchedit.tt | 1 + .../en/modules/serials/subscription-detail.tt | 1 + .../modules/serials/subscription-frequencies.tt | 1 + .../en/modules/serials/subscription-history.tt | 1 + .../serials/subscription-numberpatterns.tt | 1 + .../en/modules/serials/subscription-renew.tt | 1 + .../prog/en/modules/suggestion/suggestion.tt | 2 ++ .../intranet-tmpl/prog/en/modules/tags/review.tt | 3 +++ .../prog/en/modules/tools/additional-contents.tt | 3 +++ .../tools/automatic_item_modification_by_age.tt | 1 + .../prog/en/modules/tools/batchMod-del.tt | 1 + .../prog/en/modules/tools/batchMod-edit.tt | 1 + .../prog/en/modules/tools/batchMod.tt | 1 + .../en/modules/tools/batch_delete_records.tt | 2 ++ .../en/modules/tools/batch_extend_due_dates.tt | 2 ++ .../modules/tools/batch_record_modification.tt | 2 ++ .../prog/en/modules/tools/cleanborrowers.tt | 2 ++ .../prog/en/modules/tools/csv-profiles.tt | 2 ++ .../prog/en/modules/tools/export.tt | 4 ++++ .../prog/en/modules/tools/holidays.tt | 3 +++ .../prog/en/modules/tools/import_borrowers.tt | 1 + .../prog/en/modules/tools/inventory.tt | 2 ++ .../prog/en/modules/tools/letter.tt | 5 +++++ .../prog/en/modules/tools/manage-marc-import.tt | 5 +++++ .../modules/tools/marc_modification_templates.tt | 2 ++ .../prog/en/modules/tools/modborrowers.tt | 2 ++ .../prog/en/modules/tools/overduerules.tt | 2 ++ .../prog/en/modules/tools/picture-upload.tt | 1 + .../prog/en/modules/tools/problem-reports.tt | 1 + .../prog/en/modules/tools/quotes.tt | 2 ++ .../prog/en/modules/tools/scheduler.tt | 2 ++ .../prog/en/modules/tools/stage-marc-import.tt | 2 ++ .../prog/en/modules/tools/stockrotation.tt | 5 +++++ .../prog/en/modules/tools/upload-images.tt | 2 ++ .../prog/en/modules/tools/upload.tt | 4 ++++ .../prog/en/modules/tools/viewlog.tt | 1 + .../modules/virtualshelves/addbybiblionumber.tt | 1 + .../en/modules/virtualshelves/downloadshelf.tt | 1 + .../en/modules/virtualshelves/sendshelfform.tt | 1 + .../prog/en/modules/virtualshelves/shelves.tt | 4 ++++ .../bootstrap/en/includes/account-table.inc | 1 + .../bootstrap/en/includes/holds-table.inc | 7 +++++++ .../opac-tmpl/bootstrap/en/includes/masthead.inc | 1 + .../en/includes/opac-detail-sidebar.inc | 1 + .../bootstrap/en/includes/opac-note.inc | 1 + .../bootstrap/en/includes/overdrive-checkout.inc | 1 + .../bootstrap/en/includes/overdrive-login.inc | 1 + .../en/modules/opac-addbybiblionumber.tt | 3 +++ .../bootstrap/en/modules/opac-alert-subscribe.tt | 2 ++ .../opac-tmpl/bootstrap/en/modules/opac-auth.tt | 1 + .../en/modules/opac-authorities-home.tt | 1 + .../bootstrap/en/modules/opac-basket.tt | 1 + .../en/modules/opac-curbside-pickups.tt | 3 +++ .../bootstrap/en/modules/opac-detail.tt | 2 ++ .../bootstrap/en/modules/opac-downloadcart.tt | 1 + .../bootstrap/en/modules/opac-downloadshelf.tt | 1 + .../bootstrap/en/modules/opac-illrequests.tt | 4 ++++ .../bootstrap/en/modules/opac-issue-note.tt | 1 + .../opac-tmpl/bootstrap/en/modules/opac-main.tt | 1 + .../bootstrap/en/modules/opac-memberentry.tt | 1 + .../bootstrap/en/modules/opac-passwd.tt | 2 ++ .../en/modules/opac-password-recovery.tt | 2 ++ .../bootstrap/en/modules/opac-patron-consent.tt | 1 + .../bootstrap/en/modules/opac-privacy.tt | 4 ++++ .../bootstrap/en/modules/opac-recall.tt | 1 + .../bootstrap/en/modules/opac-recalls.tt | 1 + .../en/modules/opac-registration-confirmation.tt | 1 + .../bootstrap/en/modules/opac-reportproblem.tt | 1 + .../bootstrap/en/modules/opac-request-article.tt | 1 + .../bootstrap/en/modules/opac-reserve.tt | 1 + .../bootstrap/en/modules/opac-reset-password.tt | 1 + .../bootstrap/en/modules/opac-review.tt | 1 + .../bootstrap/en/modules/opac-search-history.tt | 4 ++++ .../bootstrap/en/modules/opac-sendbasketform.tt | 1 + .../bootstrap/en/modules/opac-sendshelfform.tt | 1 + .../bootstrap/en/modules/opac-serial-issues.tt | 1 + .../bootstrap/en/modules/opac-shelves.tt | 12 ++++++++++++ .../bootstrap/en/modules/opac-suggestions.tt | 2 ++ .../opac-tmpl/bootstrap/en/modules/opac-tags.tt | 1 + .../bootstrap/en/modules/opac-tags_subject.tt | 1 + .../opac-tmpl/bootstrap/en/modules/opac-user.tt | 5 +++++ .../bootstrap/en/modules/sci/sci-main.tt | 2 ++ .../bootstrap/en/modules/sco/sco-main.tt | 9 +++++++++ 305 files changed, 579 insertions(+), 3 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-search.inc b/koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-search.inc index 4fabdd4c341..7403c312db9 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-search.inc +++ b/koha-tmpl/intranet-tmpl/prog/en/includes/acquisitions-search.inc @@ -3,6 +3,7 @@