Back to bug 37741

Who When What Removed Added
dcook 2024-08-27 01:41:40 UTC See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35402
dcook 2024-08-27 01:48:32 UTC See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37056
Assignee koha-bugs dcook
dcook 2024-08-27 01:53:54 UTC Status NEW Needs Signoff
dcook 2024-08-27 01:54:35 UTC Depends on 36192
david 2024-08-28 02:17:11 UTC Status Needs Signoff Signed Off
david 2024-08-28 02:17:13 UTC Attachment #170743 Attachment is obsolete 0 1
david 2024-08-28 02:22:34 UTC Text to go in the release notes This fixes the cause of incorrect CSRF errors on error pages, such as 404s and 404s. This stops cookies from being sent back from error pages, so that actions that cause errors don't overwrite the existing cookie.
CC david
david 2024-08-28 02:27:56 UTC Text to go in the release notes This fixes the cause of incorrect CSRF errors on error pages, such as 404s and 404s. This stops cookies from being sent back from error pages, so that actions that cause errors don't overwrite the existing cookie. This fixes the cause of incorrect CSRF errors on error pages, such as 403s and 404s. This stops cookies from being sent back from error pages, so that actions that cause errors don't overwrite the existing cookie.
dcook 2024-08-28 02:58:06 UTC Text to go in the release notes This fixes the cause of incorrect CSRF errors on error pages, such as 403s and 404s. This stops cookies from being sent back from error pages, so that actions that cause errors don't overwrite the existing cookie. This change prevents an error in a background call (e.g. a missing favicon.ico) from affecting the user's session, which can lead to incorrect CSRF 403 errors during form POSTs. (The issue is prevented by stopping error pages from returning the CGISESSID cookie, which overwrites the CGISESSID cookie returned by the foreground page.)
chris 2024-08-30 01:44:23 UTC Status Signed Off Passed QA
chris 2024-08-30 01:44:25 UTC Attachment #170794 Attachment is obsolete 0 1
katrin.fischer 2024-08-30 10:34:01 UTC QA Contact testopia chris
katrin.fischer 2024-08-30 10:46:39 UTC Version(s) released in 24.11.00
Status Passed QA Pushed to main
lucas 2024-11-15 20:32:11 UTC Version(s) released in 24.11.00 24.11.00,24.05.06
CC lucas
Status Pushed to main Pushed to stable
fridolin.somers 2024-12-02 09:00:50 UTC Status Pushed to stable Needs documenting
CC fridolin.somers
david 2024-12-03 02:28:21 UTC Status Needs documenting RESOLVED
Resolution --- FIXED

Back to bug 37741