Back to bug 36084

Who When What Removed Added
jonathan.druart 2024-02-13 14:26:31 UTC Status ASSIGNED In Discussion
jonathan.druart 2024-02-13 15:23:07 UTC Depends on 35560 34478
jonathan.druart 2024-02-14 12:48:02 UTC Depends on 36094
jonathan.druart 2024-02-15 10:56:34 UTC Depends on 34478 36102
jonathan.druart 2024-02-15 10:58:06 UTC Status In Discussion ASSIGNED
jonathan.druart 2024-02-15 13:16:52 UTC Attachment #162108 Attachment is obsolete 0 1
jonathan.druart 2024-02-15 13:16:53 UTC Attachment #162109 Attachment is obsolete 0 1
Attachment #162110 Attachment is obsolete 0 1
jonathan.druart 2024-02-15 13:16:54 UTC Attachment #162111 Attachment is obsolete 0 1
jonathan.druart 2024-02-15 13:16:55 UTC Attachment #162112 Attachment is obsolete 0 1
Attachment #162133 Attachment is obsolete 0 1
jonathan.druart 2024-02-15 13:16:56 UTC Attachment #162147 Attachment is obsolete 0 1
jonathan.druart 2024-02-15 13:16:57 UTC Attachment #162150 Attachment is obsolete 0 1
jonathan.druart 2024-02-28 13:27:36 UTC Status ASSIGNED Passed QA
jonathan.druart 2024-02-28 14:13:42 UTC Comment 36 Tag important
jonathan.druart 2024-03-01 09:25:00 UTC Blocks 36211
jonathan.druart 2024-03-01 13:22:04 UTC Summary Pass CSRF token to SVC scripts Pass CSRF token to SVC scripts (1/2)
Product Koha security Koha
QA Contact testopia
Version(s) released in 24.05.00
Status Passed QA Pushed to master
Group Koha security
Component Koha Architecture, internals, and plumbing
jonathan.druart 2024-03-01 13:22:20 UTC Depends on 36094
jonathan.druart 2024-03-01 13:23:08 UTC Blocks 36194
jonathan.druart 2024-03-05 15:04:01 UTC Blocks 36234
jonathan.druart 2024-03-05 15:57:47 UTC Blocks 36235
jonathan.druart 2024-03-26 07:36:27 UTC Blocks 36426
fridolin.somers 2024-04-17 09:14:24 UTC Resolution --- FIXED
Status Pushed to master RESOLVED
dcook 2024-05-22 23:15:23 UTC See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36094
dcook 2024-05-22 23:23:19 UTC Text to go in the release notes The /svc API now requires a CSRF token for stateful requests (i.e. POST/PUT/PATCH/DELETE). Third-party developers should consult the wiki documentation for updated workflows. CSRF tokens are available through the /svc/authentication endpoint.
emily.lamancusa 2024-06-11 20:49:07 UTC Blocks 36407
emily.lamancusa 2024-07-16 14:37:12 UTC Blocks 37332
katrin.fischer 2025-06-02 20:45:11 UTC Status RESOLVED CLOSED

Back to bug 36084