Max Depth:

Bug 36234 depends on 26 bugs:

view as bug list

•    36234: Language prefs cannot be modified [RESOLVED FIXED; assigned to jonathan.druart]
  •    36084: Pass CSRF token to SVC scripts (1/2) [RESOLVED FIXED; assigned to jonathan.druart]
    •    36102: Protect login forms from CSRF attacks [RESOLVED FIXED; assigned to jonathan.druart]
      •    34478: Full CSRF protection [Pushed to main; assigned to jonathan.druart]
        •    34426: Add tests for CSRF checks missing [Pushed to main; assigned to martin.renvoize]
          •    30524: Add base framework for dealing with CSRF in Koha [CLOSED FIXED; assigned to martin.renvoize]
        •    35890: AutoLocation system preference + setting the library IP field - can still login and unexpected results [Pushed to oldoldoldstable; assigned to jonathan.druart]
          •    35904: C4::Auth::checkauth cannot be tested easily [Pushed to oldstable; assigned to jonathan.druart]
        •    35935: Wrong branch picked after an incorrect login [Pushed to stable; assigned to jonathan.druart]
        •    35951: We don't need category-out-of-age-limit.inc [Pushed to stable; assigned to tomascohen]
        •    35955: New CSRF token generated everytime we need one [Pushed to oldstable; assigned to dcook]
        •    36092: sessionID not passed to the template on auth.tt [Pushed to oldstable; assigned to jonathan.druart]
          •    35890: AutoLocation system preference + setting the library IP field - can still login and unexpected results [Pushed to oldoldoldstable; assigned to jonathan.druart] (*)
        •    36098: Create Koha::Session module [Needs documenting; assigned to dcook]
        •    30524: Add base framework for dealing with CSRF in Koha [CLOSED FIXED; assigned to martin.renvoize] (*)
        •    36017: Dead code in admin/clone-rules [RESOLVED FIXED; assigned to jonathan.druart]
          •    18936: Move issuingrules into circulation_rules [CLOSED FIXED; assigned to jonathan.druart]
            •    18930: Move 'refund lost item fee rules' into the `circulation_rules` table [CLOSED FIXED; assigned to jonathan.druart]
              •    18928: Move `holdallowed`, `hold_fulfillment_policy` and `returnbranch` into the `circulation_rules` table. [CLOSED FIXED; assigned to jonathan.druart]
                •    18925: Move maxissueqty and maxonsiteissueqty to circulation_rules [CLOSED FIXED; assigned to jonathan.druart]
                  •    18887: Introduce new table 'circulation_rules', use for 'max_holds' rules [CLOSED FIXED; assigned to jonathan.druart]
                    •    15524: Set limit on maximum possible holds per patron by category [CLOSED FIXED; assigned to kyle]
                      •    20227: admin/smart-rules.pl should pass categorycode instead of branchcode [CLOSED FIXED; assigned to m.de.rooy]
                        •    2000: separation of issuing & fines rules breaks defaults propagation [CLOSED FIXED; assigned to gmcharlt]
                •    22847: Specific circ rule by patron category is displaying the default (or not displaying) [CLOSED FIXED; assigned to jonathan.druart]
                  •    18887: Introduce new table 'circulation_rules', use for 'max_holds' rules [CLOSED FIXED; assigned to jonathan.druart] (*)
                  •    18925: Move maxissueqty and maxonsiteissueqty to circulation_rules [CLOSED FIXED; assigned to jonathan.druart] (*)
        •    36019: Dead code in tags/review [RESOLVED FIXED; assigned to jonathan.druart]
          •    20489: Prevent DB user login [CLOSED FIXED; assigned to jonathan.druart]
            •    20580: create_superlibrarian.pl should accept parameters [CLOSED FIXED; assigned to jonathan.druart]
        •    37040: ErrorDocument accidentally setting off CSRF [RESOLVED FIXED; assigned to dcook]

Bug 36234 does not block any bugs.

Max Depth:

• • Home
  • | New
  • | Browse
  • | Search
  • |
    [?]
  • | Reports
  • | Help
  • | New Account
  • | Log In
    [x]
  • | Forgot Password
    Login: [x]