Back to bug 36700

Who When What Removed Added
m.de.rooy 2024-04-25 12:43:39 UTC Assignee koha-bugs m.de.rooy
Severity enhancement major
m.de.rooy 2024-04-25 12:43:45 UTC Status NEW ASSIGNED
m.de.rooy 2024-04-25 12:45:20 UTC Patch complexity --- Trivial patch
Status ASSIGNED Needs Signoff
m.de.rooy 2024-04-25 12:54:46 UTC Version unspecified Main
martin.renvoize 2024-04-25 13:47:24 UTC Severity major blocker
CC martin.renvoize
martin.renvoize 2024-04-25 13:47:41 UTC Component Architecture, internals, and plumbing Koha
Group Koha security
Product Koha Koha security
CC dcook, didier.gautheron, fridolin.somers, jonathan.druart, katrin.fischer, laurent.ducos, lisette.scheer, lucas
Version Main unspecified
CC , m.de.rooy, nick, philippe.blouin, tomascohen
m.de.rooy 2024-04-26 09:03:34 UTC Summary CSRF: Cannot save a systempreference CSRF: Cannot save a systempreference (and nginx doesnt like underscores in header names)
m.de.rooy 2024-04-26 09:04:05 UTC Patch complexity Trivial patch Small patch
m.de.rooy 2024-04-29 13:16:21 UTC Attachment #165715 Attachment is obsolete 0 1
m.de.rooy 2024-04-29 13:16:23 UTC Attachment #165716 Attachment is obsolete 0 1
martin.renvoize 2024-05-01 12:34:14 UTC Attachment #165744 Attachment is obsolete 0 1
martin.renvoize 2024-05-01 12:34:17 UTC Attachment #165745 Attachment is obsolete 0 1
martin.renvoize 2024-05-01 12:34:29 UTC Attachment #165537 Attachment is obsolete 0 1
martin.renvoize 2024-05-01 12:34:37 UTC Attachment #165618 Attachment is obsolete 0 1
martin.renvoize 2024-05-01 12:34:43 UTC Status Needs Signoff Signed Off
martin.renvoize 2024-05-01 12:34:51 UTC QA Contact testopia martin.renvoize
martin.renvoize 2024-05-01 12:35:51 UTC Status Signed Off Passed QA
martin.renvoize 2024-05-01 12:38:53 UTC Summary CSRF: Cannot save a systempreference (and nginx doesnt like underscores in header names) Cannot save a systempreference (and nginx doesnt like underscores in header names)
martin.renvoize 2024-05-01 12:39:15 UTC Group Koha security
Version unspecified Main
CC gmcharlt
Component Koha Staff interface
Product Koha security Koha
m.de.rooy 2024-05-01 12:40:49 UTC Summary Cannot save a systempreference (and nginx doesnt like underscores in header names) CSRF: Cannot save a systempreference (when nginx drops the CSRF header with an underscore)
martin.renvoize 2024-05-01 12:41:23 UTC Status Passed QA Pushed to main
Version(s) released in 24.05.00
martin.renvoize 2024-05-01 12:41:29 UTC Status Pushed to main RESOLVED
Resolution --- FIXED
julian.maurice 2024-05-03 06:10:11 UTC CC julian.maurice
julian.maurice 2024-05-03 07:18:44 UTC Blocks 36598
katrin.fischer 2024-12-23 08:07:39 UTC Assignee m.de.rooy koha-bugs
QA Contact martin.renvoize testopia
Status RESOLVED CLOSED

Back to bug 36700