gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Koha-clms/svc
History
David Cook 1b59140cca Bug 34369: Require CSRF token for updating system preferences 
This patch adds the requirements that updating a system preference
requires a CSRF token. (Also, adding and deleting local system preferences.)

0. Apply patch
1. koha-plack --reload kohadev
2. Add local system preference
3. Update local system preference
4. Delete local system preference
5. Update normal system preference
6. Note no errors

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
 		2023-09-29 13:21:11 +13:00
..
cataloguing Bug 31682: Silence automatic linker warn 2022-12-14 15:32:21 +01:00
club Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
config Bug 34369: Require CSRF token for updating system preferences 2023-09-29 13:21:11 +13:00
hold Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
letters Bug 17600: Fix imports for svc/letters/preview 2021-10-21 09:56:29 +02:00
mana Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
members Bug 29771: Remove trivial cases 2022-03-11 06:35:45 -05:00
records Bug 14957: Fix record preview 2021-10-26 16:46:03 +02:00
virtualshelves Bug 28959: Add virtualshelves.public as a boolean 2021-10-28 17:47:38 +02:00
article_request Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
authentication Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
authorised_values Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
barcode Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
bib Bug 17600: Fix other occurrences in svc 2021-07-26 16:41:07 +02:00
bib_framework Bug 28750: fix svc/bib_framework 2021-07-26 16:28:52 +02:00
bib_profile Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
checkin Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
checkout_notes Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
checkouts Bug 29931: (follow-up) Fix svc/checkouts and return_claims too 2022-02-11 06:09:10 -05:00
convert_report Bug 24663: Remove authnotrequired if set to 0 2020-09-03 10:40:35 +02:00
cover_images Bug 29771: Remove trivial cases 2022-03-11 06:35:45 -05:00
creator_batches Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
holds Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
import_bib Bug 26632: Remove two more occurrences 2022-10-12 16:37:34 +02:00
localization
…
new_bib Bug 28750: (bug 17600 follow-up) Use full routine names in svc/new_bib svc/bib 2021-07-26 16:28:52 +02:00
problem_reports Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
renew Bug 29051: Update svc api to allow seen renewals 2022-08-26 09:45:42 +02:00
report Bug 26669: (QA follow-up) Update last run when report run by name 2022-04-08 10:46:13 -04:00
return_claims Bug 29931: (follow-up) Fix svc/checkouts and return_claims too 2022-02-11 06:09:10 -05:00
split_callnumbers Bug 26251: Remove unused routines from svc/split_callnumbers 2020-08-20 10:23:56 +02:00