| Max Depth: |
Bug 38325 does not depend on any bugs.
Bug 38325 blocks 42 bugs:
view as bug list-
38325:
Cannot delete invoice while viewing it
[Signed Off; assigned to phil]
-
36192:
[OMNIBUS] CSRF Protection for Koha
[ASSIGNED; assigned to koha-bugs]
-
37206:
Removing an item from a label batch should be a CSRF-protected POST operation
[Pushed to main; assigned to oleonard]
-
37235:
Download single authority results in 500 error
[Pushed to main; assigned to oleonard]
-
37263:
Creating default article request fees is not working
[Pushed to main; assigned to pedro.amorim]
-
37270:
Deleting a report from the actions menu on a list of saved reports does not work
[Pushed to stable; assigned to oleonard]
-
37489:
Cannot delete patron image without uploading a file
[Needs documenting; assigned to samalau]
-
37580:
Unique holiday descriptions are not editable
[Pushed to main; assigned to cj.lynce]
-
37728:
More "op" are missing in POSTed forms
[Pushed to main; assigned to jonathan.druart]
-
37741:
Koha errors on page (e.g. 404) cause incorrect CSRF errors
[Pushed to main; assigned to dcook]
-
37765:
Fix forms that POST without an op in systempreferences
[Pushed to main; assigned to phil]
-
37766:
Fix forms that POST without an op in MARC bibliographic frameworks
[Pushed to main; assigned to phil]
-
37767:
Fix forms that POST without an op in Authority types
[Pushed to main; assigned to phil]
-
37768:
Fix form that POSTs without an op in itemtype administration
[Pushed to main; assigned to phil]
-
37769:
Fix forms that POST without an op in currency administration
[Pushed to main; assigned to phil]
-
37779:
Fix forms that POST without an op in tag moderation
[Pushed to main; assigned to phil]
-
37783:
Fix form that looks like it would POST without an op in reserve/request.tt
[Pushed to main; assigned to phil]
-
37785:
Remove dead code in tools/letter.tt that looks like a form that would POST without an op
[Pushed to main; assigned to phil]
-
37794:
Fix form that POSTs without an op in Holds to pull
[Pushed to main; assigned to phil]
-
37827:
Switch OPAC download list form from POST to GET
[Pushed to main; assigned to phil]
-
37853:
Returning to your account at the end of changing your password in the OPAC doesn't need to POST a form
[Pushed to main; assigned to phil]
-
37887:
OPAC password recovery needs to use a cud- op while POSTing new password
[Pushed to main; assigned to phil]
-
37914:
Forms for budget planning filters and export should GET rather than POST
[Pushed to main; assigned to phil]
-
37916:
Plugin search and install regression
[Pushed to main; assigned to martin.renvoize]
-
37993:
Having a single EDI EAN account produces a bad redirect
[NEW; assigned to koha-bugs]
-
38275:
Unable to delete patron card creator images
[Pushed to main; assigned to dcook]
-
38309:
Cannot delete additional fields
[Passed QA; assigned to phil]
-
38328:
Cannot delete ILL batch statuses
[Needs Signoff; assigned to phil]
-
36597:
Cannot delete circulation desk
[RESOLVED FIXED; assigned to oleonard]
-
36598:
Add CSRF protection to Mojolicious apps
[RESOLVED FIXED; assigned to julian.maurice]
-
37080:
Cannot delete a MARC bibliographic framework or authority type
[RESOLVED FIXED; assigned to phil]
-
37093:
403 Forbidden Error when attempting to search for Mana Reports
[RESOLVED FIXED; assigned to phil]
-
37187:
Label batches and label templates cannot be deleted
[RESOLVED FIXED; assigned to oleonard]
-
37192:
Can't print label from the item editor
[RESOLVED FIXED; assigned to lucas]
-
37197:
Batch patron modification from reports fails by using GET instead of POST
[RESOLVED FIXED; assigned to phil]
-
37188:
Batch patron modification from report results should be an option when borrowernumber is selected
[Needs documenting; assigned to nick]
-
37481:
Some operations that do not affect data should be submitted as POST requests
[NEW; assigned to koha-bugs]
-
37615:
Clean up the form for sending cardnumbers from a report to batch patron modification
[Pushed to main; assigned to phil]
-
37188:
Batch patron modification from report results should be an option when borrowernumber is selected
[Needs documenting; assigned to nick]
-
37409:
Edit button for items in course reserves list doesn't work
[RESOLVED FIXED; assigned to samalau]
-
37959:
Item circulation alerts table appears to be broken
[RESOLVED FIXED; assigned to phil]
-
37961:
Inventory followup fails by POSTing without an op or csrf_token
[RESOLVED FIXED; assigned to phil]
-
37206:
Removing an item from a label batch should be a CSRF-protected POST operation
[Pushed to main; assigned to oleonard]
-
36192:
[OMNIBUS] CSRF Protection for Koha
[ASSIGNED; assigned to koha-bugs]
| Max Depth: |