Good catch from Jonathan. See comment11. Authorities detail should pass a CSRF token to authorities-home when deleting a record without linked biblios. Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org> Passing the token with GET is not a good way to do, but nothing quick to replace that. Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com> |
||
|---|---|---|
| .. | ||
| auth_finder.pl | ||
| authorities-home.pl | ||
| authorities-list.pl | ||
| authorities.pl | ||
| blinddetail-biblio-search.pl | ||
| detail-biblio-search.pl | ||
| detail.pl | ||
| export.pl | ||
| merge.pl | ||
| merge_ajax.pl | ||
| ysearch.pl | ||