gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bug 18740: (bug 16992 follow-up) Add CSRF token to the template 

Bug 16992 is in
  commit 9e74db7b51
    Bug 18124: Restrict CSRF token to user's session

but template change is missing

Test plan:
Modify a patron from member-password.pl
Without this patch you got
  Wrong CSRF token at /home/vagrant/kohaclone/members/member-password.pl line 68.

Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Patch fixes the bug. Passes the qa script.
Signed-off-by: Mason James <mtj@kohaaloha.com>
This commit is contained in:
Jonathan Druart 2017-06-06 16:41:37 -03:00 committed by Mason James
parent 367380e96a
commit 5e8ea082e6
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
koha-tmpl/intranet-tmpl/prog/en/modules/members/member-password.tt
View File

@ -114,7 +114,11 @@
</li>
</ol>
</fieldset>
<fieldset class="action"><input type="submit" value="Save" /> <a class="cancel" href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% borrowernumber %]">Cancel</a></fieldset>
<fieldset class="action">
<input type="hidden" name="csrf_token" value="[% csrf_token %]" />
<input type="submit" value="Save" />
<a class="cancel" href="/cgi-bin/koha/members/moremember.pl?borrowernumber=[% borrowernumber %]">Cancel</a>
</fieldset>
</form>[% END %]
</div>