Back to bug 37741
Who | When | What | Removed | Added |
---|---|---|---|---|
dcook | 2024-08-27 01:41:40 UTC | See Also | https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35402 | |
dcook | 2024-08-27 01:48:32 UTC | See Also | https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37056 | |
Assignee | koha-bugs | dcook | ||
dcook | 2024-08-27 01:53:54 UTC | Status | NEW | Needs Signoff |
dcook | 2024-08-27 01:54:35 UTC | Depends on | 36192 | |
david | 2024-08-28 02:17:11 UTC | Status | Needs Signoff | Signed Off |
david | 2024-08-28 02:17:13 UTC | Attachment #170743 Attachment is obsolete | 0 | 1 |
david | 2024-08-28 02:22:34 UTC | Text to go in the release notes | This fixes the cause of incorrect CSRF errors on error pages, such as 404s and 404s. This stops cookies from being sent back from error pages, so that actions that cause errors don't overwrite the existing cookie. | |
CC | david | |||
david | 2024-08-28 02:27:56 UTC | Text to go in the release notes | This fixes the cause of incorrect CSRF errors on error pages, such as 404s and 404s. This stops cookies from being sent back from error pages, so that actions that cause errors don't overwrite the existing cookie. | This fixes the cause of incorrect CSRF errors on error pages, such as 403s and 404s. This stops cookies from being sent back from error pages, so that actions that cause errors don't overwrite the existing cookie. |
dcook | 2024-08-28 02:58:06 UTC | Text to go in the release notes | This fixes the cause of incorrect CSRF errors on error pages, such as 403s and 404s. This stops cookies from being sent back from error pages, so that actions that cause errors don't overwrite the existing cookie. | This change prevents an error in a background call (e.g. a missing favicon.ico) from affecting the user's session, which can lead to incorrect CSRF 403 errors during form POSTs. (The issue is prevented by stopping error pages from returning the CGISESSID cookie, which overwrites the CGISESSID cookie returned by the foreground page.) |
chris | 2024-08-30 01:44:23 UTC | Status | Signed Off | Passed QA |
chris | 2024-08-30 01:44:25 UTC | Attachment #170794 Attachment is obsolete | 0 | 1 |
katrin.fischer | 2024-08-30 10:34:01 UTC | QA Contact | testopia | chris |
katrin.fischer | 2024-08-30 10:46:39 UTC | Version(s) released in | 24.11.00 | |
Status | Passed QA | Pushed to main | ||
lucas | 2024-11-15 20:32:11 UTC | Version(s) released in | 24.11.00 | 24.11.00,24.05.06 |
CC | lucas | |||
Status | Pushed to main | Pushed to stable | ||
fridolin.somers | 2024-12-02 09:00:50 UTC | Status | Pushed to stable | Needs documenting |
CC | fridolin.somers | |||
david | 2024-12-03 02:28:21 UTC | Status | Needs documenting | RESOLVED |
Resolution | --- | FIXED |
Back to bug 37741