From b4d2773fa2aba984b79c4c93191a448a161d2a45 Mon Sep 17 00:00:00 2001 From: Baptiste Wojtkowski Date: Wed, 12 Mar 2025 14:42:42 +0100 Subject: [PATCH] Bug 39317: Fix CSRF protection for letters TEST PLAN: 1 - go to /cgi-bin/koha/tools/letter.pl 2 - click on New notice -> claim serial issue (or any other one) 3 - Fill required fields with random string 4 - Save -> KABOOM 5 - Apply patch 6 - Repeat 1-4 and see it works now --- koha-tmpl/intranet-tmpl/prog/en/modules/tools/letter.tt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/letter.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/tools/letter.tt index 2bc37a12..f04b9e76 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/letter.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/tools/letter.tt @@ -366,7 +366,7 @@ -
+ [% INCLUDE 'csrf-token.inc' %] [% IF add_form %] -- 2.30.2