gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
Koha-clms/members
History
Jonathan Druart 39b1653348 Bug 18124: Change the calls to generate and check CSRF tokens 
The parameter change in Koha::Token should be applied to the calling
scripts.

Test plan:
Confirm that the different forms of the scripts modified by this patch
still work correctly.

Test the problematic behavior:
Open 2 tabs with in same user's session, go on the edit patron page
(memberentry.pl).
Log out and log in from the other tab.
Submit the form
=> Wrong CSRF token should be raised

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Julian Maurice <julian.maurice@biblibre.com>
 		2017-04-24 11:00:08 +12:00
..
boraccount.pl Bug 15635: Koha::Patron::Images - Remove GetPatronImage 2016-03-04 12:54:15 +00:00
default_messageprefs.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
deletemem.pl Bug 17403: Internal Server Error while deleting patron 2016-10-22 13:47:26 +02:00
discharge.pl Bug 15823: Can still access patron discharge slip without having the syspref on 2016-05-06 04:20:48 +00:00
discharges.pl Bug 15548: Move new patron related code to Patron* 2016-03-03 14:38:26 -07:00
files.pl Bug 16154: CGI->multi_param - Force scalar context 2016-04-26 23:16:43 +00:00
guarantor_search.pl Bug 15109: Make name the default sort order for all patron searches 2015-11-17 09:49:21 -03:00
mancredit.pl Bug 15635: Koha::Patron::Images - Remove GetPatronImage 2016-03-04 12:54:15 +00:00
maninvoice.pl Bug 15635: Koha::Patron::Images - Remove GetPatronImage 2016-03-04 12:54:15 +00:00
member-flags.pl Bug 18124: Restrict CSRF token to user's session 2017-04-24 11:00:07 +12:00
member-password.pl Bug 18124: Change the calls to generate and check CSRF tokens 2017-04-24 11:00:08 +12:00
member.pl Bug 17375: Search by dateofbirth - handle invalid dates 2016-11-02 17:58:26 +00:00
memberentry.pl Bug 18124: Restrict CSRF token to user's session 2017-04-24 11:00:07 +12:00
members-home.pl Bug 15548: Move new patron related code to Patron* 2016-03-03 14:38:26 -07:00
members-update-do.pl Bug 15548: Move new patron related code to Patron* 2016-03-03 14:38:26 -07:00
members-update.pl Bug 15548: Move new patron related code to Patron* 2016-03-03 14:38:26 -07:00
mod_debarment.pl Bug 16154: CGI->multi_param - Force scalar context 2016-04-26 23:16:43 +00:00
moremember.pl Bug 18124: Restrict CSRF token to user's session 2017-04-24 11:00:07 +12:00
nl-search.pl Bug 16154: CGI->multi_param - Force scalar context 2016-04-26 23:16:43 +00:00
notices.pl Bug 15635: Koha::Patron::Images - Remove GetPatronImage 2016-03-04 12:54:15 +00:00
patronimage.pl Bug 17423 - patronimage.pl permission is too restrictive 2016-10-22 14:59:53 +02:00
pay.pl Bug 11217: The # in accountlines descriptions makes them un-writeoffable 2016-10-22 14:49:35 +02:00
paycollect.pl Bug 17052: Display patron category description in the sidebar of paycollect 2016-08-23 12:18:48 +02:00
print_overdues.pl Bug 12933: (QA followup) Rename GetOverdues to GetOverduesForPatron 2015-11-04 12:41:29 -03:00
printfeercpt.pl Bug 17154 : Note column is missing on account lines receipt 2016-10-22 15:22:59 +02:00
printinvoice.pl Bug 17154 : Note column is missing on account lines receipt 2016-10-22 15:22:59 +02:00
printslip.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00
purchase-suggestions.pl Bug 15635: Koha::Patron::Images - Remove GetPatronImage 2016-03-04 12:54:15 +00:00
readingrec.pl Bug 15635: Koha::Patron::Images - Remove GetPatronImage 2016-03-04 12:54:15 +00:00
routing-lists.pl Bug 16429 - Fix root problem 2016-05-05 10:20:44 +00:00
setstatus.pl Bug 14910: Redirect to the circulation module after a renew 2015-10-02 14:22:16 -03:00
statistics.pl Bug 15635: Koha::Patron::Images - Remove GetPatronImage 2016-03-04 12:54:15 +00:00
summary-print.pl Bug 17128: Make summary-print.pl plack safe 2016-09-08 21:56:35 +02:00
update-child.pl Bug 9978: Replace license header with the correct license (GPLv3+) 2015-04-20 09:59:38 -03:00