View | Details | Raw Unified | Return to bug 36084
Collapse All | Expand All

(-)a/debian/templates/plack.psgi (-18 / +14 lines)
Lines 64-87 use CGI qw(-utf8 ); # we will loose -utf8 under plack, otherwise Link Here
64
                $q->param( 'debug_programming_error', "'$original_op' must start with 'cud-' for $request_method" );
64
                $q->param( 'debug_programming_error', "'$original_op' must start with 'cud-' for $request_method" );
65
            }
65
            }
66
66
67
            if ( $csrf_token ) {
67
            die "Programming error - No CSRF token passed for $request_method"
68
                unless (
68
                unless $csrf_token;
69
                    Koha::Token->new->check_csrf(
69
70
                        {
70
            unless (
71
                            session_id => scalar $q->cookie('CGISESSID'),
71
                Koha::Token->new->check_csrf(
72
                            token      => $csrf_token,
72
                    {
73
                        }
73
                        session_id => scalar $q->cookie('CGISESSID'),
74
                    )
74
                        token      => $csrf_token,
75
                    )
75
                    }
76
                {
76
                )
77
                    Koha::Logger->get->debug("The form submission failed (Wrong CSRF token).");
77
                )
78
                    $q->param( 'op', '' );
78
            {
79
                    $q->param( 'invalid_csrf_token', 1);
79
                Koha::Logger->get->debug("The form submission failed (Wrong CSRF token).");
80
                }
81
            } else {
82
                Koha::Logger->get->warn("Programming error - No CSRF token passed for $request_method");
83
                $q->param( 'op', '' );
80
                $q->param( 'op', '' );
84
                $q->param( 'debug_programming_error', "No CSRF token passed for $request_method" );
81
                $q->param( 'invalid_csrf_token', 1);
85
            }
82
            }
86
        }
83
        }
87
84
88
- 

Return to bug 36084