Summary: | Wrong CSRF token when emailing cart contents | ||
---|---|---|---|
Product: | Koha | Reporter: | Barry Cannon <bc> |
Component: | OPAC | Assignee: | Jonathan Druart <jonathan.druart> |
Status: | CLOSED FIXED | QA Contact: | Testopia <testopia> |
Severity: | major | ||
Priority: | P5 - low | CC: | jonathan.druart, jzairo, liz, marjorie.barry-vila, nick, patrick.robitaille |
Version: | Main | ||
Hardware: | All | ||
OS: | All | ||
Change sponsored?: | --- | Patch complexity: | Trivial patch |
Documentation contact: | Documentation submission: | ||
Text to go in the release notes: | Version(s) released in: | ||
Circulation function: | |||
Attachments: |
Bug 18975: Retrieve up-to-date CGISESSID when just logged in
Bug 18975: Retrieve up-to-date CGISESSID when just logged in Bug 18975: Retrieve up-to-date CGISESSID when just logged in |
Description
Barry Cannon
2017-07-24 13:15:48 UTC
I confirm this bug in 16.11.05. It affects master as well Created attachment 70084 [details] [review] Bug 18975: Retrieve up-to-date CGISESSID when just logged in If a user is asked to login before sending a card, the wrong (old) CGISESSID cookie is used. We need to retrieve the one that has just been created. This will certainly need more work, I guess other scripts are affected too. Should this be NSO? I do not have time to investigate more the other scripts, but this one patch can be tested yes. Created attachment 71480 [details] [review] Bug 18975: Retrieve up-to-date CGISESSID when just logged in If a user is asked to login before sending a card, the wrong (old) CGISESSID cookie is used. We need to retrieve the one that has just been created. This will certainly need more work, I guess other scripts are affected too. Signed-off-by: Claire Gravely <claire.gravely@bsz-bw.de> Created attachment 71883 [details] [review] Bug 18975: Retrieve up-to-date CGISESSID when just logged in If a user is asked to login before sending a card, the wrong (old) CGISESSID cookie is used. We need to retrieve the one that has just been created. This will certainly need more work, I guess other scripts are affected too. Signed-off-by: Claire Gravely <claire.gravely@bsz-bw.de> Pushed to master for 18.05, thanks to everybody involved! Awesome work all! Pushed to stable for 17.11.03 |