Jonathan Druart 9e74db7b51 Bug 18124: Restrict CSRF token to user's session ... Currently the CSRF token generated is based on the borrowernumber, and is valid across user's session. We need to restrict the CSRF token to the current session. With this patch the CSRF token is generated concatenating the id (borrowernumber) and the CGISESSID cookie. Test plan: Run t/Token.t Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> Signed-off-by: Julian Maurice <julian.maurice@biblibre.com> Signed-off-by: Mason James <mtj@kohaaloha.com>		2017-04-24 11:00:07 +12:00
..
basket.pl	Bug 15258: Fix Perl scripts declaring unused variables	2015-12-30 17:24:45 -07:00
downloadcart.pl	Bug 14544: Get rid of C4::VirtualShelves and C4::VirtualShelves::Page	2015-11-05 09:58:02 -03:00
sendbasket.pl	Bug 18124: Restrict CSRF token to user's session	2017-04-24 11:00:07 +12:00