Max Depth:

Bug 37887 depends on 29 open bugs:

view as bug list

•    37887: OPAC password recovery needs to use a cud- op while POSTing new password [Pushed to stable; assigned to phil]
  •    36192: [OMNIBUS] CSRF Protection for Koha [ASSIGNED; assigned to koha-bugs]
    •    34478: Full CSRF protection [Pushed to main; assigned to jonathan.druart]
      •    34426: Add tests for CSRF checks missing [Pushed to main; assigned to martin.renvoize]
      •    35890: AutoLocation system preference + setting the library IP field - can still login and unexpected results [Pushed to oldoldoldstable; assigned to jonathan.druart]
        •    35904: C4::Auth::checkauth cannot be tested easily [Pushed to oldstable; assigned to jonathan.druart]
      •    35935: Wrong branch picked after an incorrect login [Pushed to stable; assigned to jonathan.druart]
      •    35951: We don't need category-out-of-age-limit.inc [Pushed to stable; assigned to tomascohen]
      •    35955: New CSRF token generated everytime we need one [Pushed to oldstable; assigned to dcook]
      •    36092: sessionID not passed to the template on auth.tt [Pushed to oldstable; assigned to jonathan.druart]
        •    35890: AutoLocation system preference + setting the library IP field - can still login and unexpected results [Pushed to oldoldoldstable; assigned to jonathan.druart] (*)
      •    36098: Create Koha::Session module [Needs documenting; assigned to dcook]
    •    35992: opac-shareshelf: Accepting invitation should not be triggered directly [ASSIGNED; assigned to m.de.rooy]
      •    34478: Full CSRF protection [Pushed to main; assigned to jonathan.druart] (*)
      •    35445: OPAC registration verification triggered by email URL scanners [Pushed to stable; assigned to dcook]
    •    36189: Rewrite www/auth_values_input_www.t using Selenium [NEW; assigned to chris]
      •    34478: Full CSRF protection [Pushed to main; assigned to jonathan.druart] (*)
    •    36195: CSRF - testing reports [NEW; assigned to koha-bugs]
      •    34478: Full CSRF protection [Pushed to main; assigned to jonathan.druart] (*)
    •    36414: Consequent workflow stages form submit fail due to CSRF token conflict [Needs documenting; assigned to pedro.amorim]
    •    36416: Check out using CirculateILL is broken [Needs documenting; assigned to pedro.amorim]
    •    36635: Cannot display vendor's issue [Needs documenting; assigned to jonathan.druart]
    •    37071: Purchase suggestions from the patron account are not redirecting to the suggestion form [Needs documenting; assigned to Laura.escamilla]
    •    37332: Renewal due date and renew as unseen fields not respected when renewing an item from the patron account [Needs documenting; assigned to emily.lamancusa]
    •    37385: Transfer/next hold modals not triggered automatically when cancelling a hold by checking item in [Needs documenting; assigned to kyle]
    •    37407: Fast add / fast cataloging from patron checkout does not checkout item [Needs documenting; assigned to blawlor]
    •    37429: Can't edit bibliographic records anymore (empty form) [Pushed to stable; assigned to jonathan.druart]
    •    37483: Batch extend due dates tool not working [Needs documenting; assigned to nick]
      •    34478: Full CSRF protection [Pushed to main; assigned to jonathan.druart] (*)
    •    37536: Cataloging add item js needs to update conditional that checks op [Needs documenting; assigned to blawlor]
    •    37553: Fix CSRF handling in koha-svc.pl script [Needs documenting; assigned to dcook]
    •    38030: stocknumberAV.pl fails with CSRF protection [Pushed to main; assigned to januszop]
    •    38065: Auto control number (001) widget in advanced editor does not work under CSRF protection [Pushed to stable; assigned to januszop]
    •    38325: Cannot delete invoice while viewing it [Pushed to main; assigned to phil]

Bug 37887 does not block any open bugs.

Max Depth:

• • Home
  • | New
  • | Browse
  • | Search
  • |
    [?]
  • | Reports
  • | Help
  • | New Account
  • | Log In
    [x]
  • | Forgot Password
    Login: [x]