| Summary: | Wrong CSRF token when emailing cart contents | ||
|---|---|---|---|
| Product: | Koha | Reporter: | Barry Cannon <bc> |
| Component: | OPAC | Assignee: | Jonathan Druart <jonathan.druart> |
| Status: | CLOSED FIXED | QA Contact: | Testopia <testopia> |
| Severity: | major | ||
| Priority: | P5 - low | CC: | jonathan.druart, jzairo, liz, marjorie.barry-vila, nick, patrick.robitaille |
| Version: | Main | ||
| Hardware: | All | ||
| OS: | All | ||
| GIT URL: | Initiative type: | --- | |
| Sponsorship status: | --- | Comma delimited list of Sponsors: | |
| Crowdfunding goal: | 0 | Patch complexity: | Trivial patch |
| Documentation contact: | Documentation submission: | ||
| Text to go in the release notes: | Version(s) released in: | ||
| Circulation function: | |||
| Attachments: |
Bug 18975: Retrieve up-to-date CGISESSID when just logged in
Bug 18975: Retrieve up-to-date CGISESSID when just logged in Bug 18975: Retrieve up-to-date CGISESSID when just logged in |
||
|
Description
Barry Cannon
2017-07-24 13:15:48 UTC
I confirm this bug in 16.11.05. It affects master as well Created attachment 70084 [details] [review] Bug 18975: Retrieve up-to-date CGISESSID when just logged in If a user is asked to login before sending a card, the wrong (old) CGISESSID cookie is used. We need to retrieve the one that has just been created. This will certainly need more work, I guess other scripts are affected too. Should this be NSO? I do not have time to investigate more the other scripts, but this one patch can be tested yes. Created attachment 71480 [details] [review] Bug 18975: Retrieve up-to-date CGISESSID when just logged in If a user is asked to login before sending a card, the wrong (old) CGISESSID cookie is used. We need to retrieve the one that has just been created. This will certainly need more work, I guess other scripts are affected too. Signed-off-by: Claire Gravely <claire.gravely@bsz-bw.de> Created attachment 71883 [details] [review] Bug 18975: Retrieve up-to-date CGISESSID when just logged in If a user is asked to login before sending a card, the wrong (old) CGISESSID cookie is used. We need to retrieve the one that has just been created. This will certainly need more work, I guess other scripts are affected too. Signed-off-by: Claire Gravely <claire.gravely@bsz-bw.de> Pushed to master for 18.05, thanks to everybody involved! Awesome work all! Pushed to stable for 17.11.03 |