From e4c6b3e2c0892c063053c827fd8141d9d5153581 Mon Sep 17 00:00:00 2001
From: Lucas Gass <lucas@bywatersolutions.com>
Date: Tue, 9 Jan 2024 21:49:44 +0000
Subject: [PATCH] Bug 35752: Pass CSRF token to del_form

To test:

1. Have multiple additional content items ( news/HTML customization/Pages )
2. On one of the pages ( news/HTML customization/Pages ) select more than one item and try to delete using the 'Delete selected' button
3. You are redirected but nothing happens.
4. APPLY PATCH
5. Try again, this time you should be able to successfully delete additional-contents.
---
 .../intranet-tmpl/prog/en/modules/tools/additional-contents.tt   | 1 +
 1 file changed, 1 insertion(+)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/additional-contents.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/tools/additional-contents.tt
index cf372332c3..6d75eaccb2 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/additional-contents.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/tools/additional-contents.tt
@@ -377,6 +377,7 @@
     [% IF additional_contents.count %]
         <div class="page-section">
             <form id="del_form" method="post" action="/cgi-bin/koha/tools/additional-contents.pl">
+                [% INCLUDE 'csrf-token.inc' %]
                 <table id="table_additional_contents">
                     <thead>
                         <tr>
-- 
2.30.2