gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bug 38030: (QA follow-up) Move csrf_token to POST body from URL 

Signed-off-by: David Cook <dcook@prosentient.com.au>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
(cherry picked from commit aec1ad5bab)
Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
This commit is contained in:
David Cook 2024-10-22 00:42:22 +00:00 committed by Lucas Gass
parent f7dd1d21a8
commit 5e7e39e10d
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
cataloguing/value_builder/stocknumberAV.pl
View File

@ -50,13 +50,14 @@ my $builder = sub {
function Click$params->{id}(ev) {
ev.preventDefault();
var code = document.getElementById(ev.data.id);
const token = document.getElementsByName('csrf_token')[0].value;
const csrf_token = document.querySelector('meta[name="csrf-token"]').getAttribute('content');
\$.ajax({
url: '/cgi-bin/koha/cataloguing/plugin_launcher.pl?csrf_token=' + token,
url: '/cgi-bin/koha/cataloguing/plugin_launcher.pl',
type: 'POST',
data: {
'plugin_name': 'stocknumberAV.pl',
'code' : code.value,
'csrf_token': csrf_token
},
success: function(data){
var field = document.getElementById(ev.data.id);