From 8d2661dd6296b41874656904eb150b04f6e45421 Mon Sep 17 00:00:00 2001 From: Amit Gupta Date: Wed, 22 Jan 2020 21:37:22 +0530 Subject: [PATCH] Bug 22990 Add CSRF protection to Koha pages --- koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt | 4 +++- koha-tmpl/intranet-tmpl/prog/en/modules/members/pay.tt | 1 + koha-tmpl/intranet-tmpl/prog/en/modules/suggestion/suggestion.tt | 8 +++++--- members/boraccount.pl | 3 +++ members/pay.pl | 7 +++++++ members/setstatus.pl | 1 + suggestion/suggestion.pl | 7 +++++-- 7 files changed, 25 insertions(+), 6 deletions(-) diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt index 7427d41..e1acb2f 100644 --- a/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt +++ b/koha-tmpl/intranet-tmpl/prog/en/modules/members/boraccount.tt @@ -82,7 +82,7 @@ [% END %] Details [% IF account.is_credit %] - Void + Void [% END %] [% IF CAN_user_updatecharges_payout && account.is_credit && ( account.amountoutstanding < 0 ) %] @@ -125,6 +125,7 @@ + [% INCLUDE 'csrf-token.inc' %]