Go to file
Lucas Gass b9140b31a5
Bug 31492: Set CSRF token in circulation.pl
To test:
* Turn on patronimages system preferences
* Go to any patron account
* Hover over the 'dummy image' for the Add button
* Browse and select an image for upload
* Saving results in the following error:

The form submission failed (Wrong CSRF token). Try to come back, refresh the page, then try again.

Apply patch and try again. You shouldn't need to try twice, it should work on the first attempt now.

Signed-off-by: David Nind <david@davidnind.com>
Signed-off-by: David Cook <dcook@prosentient.com.au>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
(cherry picked from commit f0e6f25428)
Signed-off-by: Jacob O'Mara <jacob.omara@ptfs-europe.com>
(cherry picked from commit 11d88ba12f)

Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
(cherry picked from commit 715afc2826)
Signed-off-by: Arthur Suzuki <arthur.suzuki@biblibre.com>
2023-01-26 14:11:26 +01:00
C4 Bug 20596: (QA follow-up) perltidy 2023-01-26 11:45:27 +01:00
Koha Bug 31644: Check if subfield defined, not for truth 2022-12-16 15:31:51 +01:00
acqui Bug 32457: Fix CGI vulnerability in addorder.pl 2023-01-26 11:31:19 +01:00
admin Bug 32348: Add library public in columns settings 2023-01-26 11:57:34 +01:00
api Bug 29105: Add effective_itemtype handling to items api 2022-08-26 14:47:57 +02:00
authorities Bug 29333: Fix encoding of imported UNIMARC authorities 2022-08-26 09:47:06 +02:00
basket Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
bin
…
catalogue Bug 22605: Add ability to edit a search on staff interface 2022-10-19 05:07:19 +02:00
cataloguing Bug 31873: Check ->find before calling ->safe_delete 2023-01-26 10:02:20 +01:00
circ Bug 31492: Set CSRF token in circulation.pl 2023-01-26 14:11:26 +01:00
clubs Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
course_reserves Bug 30840: Add support for barcode filters to course reserves 2022-06-21 15:40:30 +02:00
debian Bug 31675: Remove packages from debian/control that are no longer used 2023-01-26 10:57:35 +01:00
docs Update release notes for 21.11.13 release 2022-10-23 00:28:54 +02:00
errors Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
etc Bug 15048: Index all possible searched subfields for index-term-genre 2022-12-16 16:42:38 +01:00
ill Bug 22614: Migrate original request 2021-09-21 20:22:57 +02:00
installer Fix db_revs permissions 2023-01-09 18:00:24 +01:00
koha-tmpl Bug 32255: Resolve "Cannot use file upload in batch record modification" 2023-01-26 14:10:05 +01:00
labels Bug 31482: Label creator does not call barcodedecode 2022-11-15 18:12:13 +01:00
lib/CGI/Session/Serialize Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
members Bug 29987: (follow-up) Fix missing payment type 2022-12-16 14:35:30 +01:00
misc Update release notes for 21.11.15 release 2023-01-09 18:00:24 +01:00
offline_circ Bug 30525: Items batch modification broken 2022-04-22 14:29:43 -04:00
opac Bug 31531: Remove unnecessary use directives on opac-memberentry.pl 2022-11-14 17:16:12 +01:00
patron_lists Bug 16446: Add ability to add patrons to list by borrowernumber 2021-10-21 12:24:04 +02:00
patroncards Bug 24001: Fix patron card template edition 2022-05-06 13:47:21 -04:00
plugins Bug 29787: Add plugin version to plugin search results 2022-04-15 06:36:54 -04:00
pos Bug 28481: (RM follow-up) formatting 2021-12-17 10:04:21 -05:00
reports Bug 28967: Patrons with no checkouts report shows patrons from other libraries with IndependentBranches 2022-12-16 14:26:55 +01:00
reserve Bug 31575: Missing warning for holds where AllowHoldPolicyOverride can be used to force a hold to be placed 2022-12-14 14:42:38 +01:00
reviews Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
rotating_collections Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
serials Bug 29608: Made so doesn't require full permission 2022-11-14 14:31:53 +01:00
services Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
skel
…
suggestion Bug 24370: Allow resetting library to ANY 2021-11-02 14:57:04 +01:00
svc Bug 31682: Silence automatic linker warn 2022-12-14 15:32:21 +01:00
t Bug 20596: Add unit test for multiple values in authority search 2023-01-26 11:45:27 +01:00
tags Bug 29469: (bug 17600 follow-up) Fix tag approval/rejection from staff 2021-11-16 15:49:22 +01:00
tmp/modified_authorities
…
tools Bug 32037: Check for existence of object before building link 2023-01-26 10:52:26 +01:00
virtualshelves Bug 29114: Trim whitespace before the barcode 2022-08-26 15:00:27 +02:00
xt Bug 27622: Fix sample_notices.t 2021-10-07 15:49:01 +02:00
.editorconfig Bug 27375: Set YAML file settings in .editorconfig 2021-11-03 15:40:52 +01:00
.eslintrc.json
…
.gitignore
…
.htaccess
…
.mailmap 21.11.00 - Update .mailmap 2021-11-26 12:26:22 +01:00
.perlcriticrc Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
.proverc.dist Bug 19821: Install sample data, ES mappings and Version syspref 2021-10-25 11:27:40 +02:00
.scss-lint.yml
…
INSTALL Bug 26617: Update INSTALL file to include koha-testing-docker and Gitlab links 2020-10-15 12:56:30 +02:00
Koha.pm Increment version for 21.11.15 release 2023-01-09 18:00:24 +01:00
LICENSE
…
MANIFEST.SKIP
…
Makefile.PL Bug 18984: Remove NORMARC support 2021-10-07 15:36:40 +02:00
README
…
README.md Bug 27092: Remove note about "synced repo" from README.md 2020-11-25 16:31:58 +01:00
README.robots
…
about.pl Bug 27667: Display a warning for records missing in Elasticsearch 2022-08-26 14:59:04 +02:00
app.psgi Bug 20582: Fix PSGI file when behind a reverse proxy 2020-10-06 12:00:04 +02:00
changelanguage.pl Bug 25898: Prohibit indirect object notation 2020-10-15 12:56:30 +02:00
cpanfile Bug 31588: Update cpanfile for new OpenAPI versions (21.11) 2022-12-16 14:42:00 +01:00
fix-perl-path.PL Bug 28606: Remove $DEBUG and $ENV{DEBUG} 2021-06-24 11:53:44 +02:00
gulpfile.js Bug 18984: Remove NORMARC support 2021-10-07 15:36:40 +02:00
help.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
koha_perl_deps.pl Bug 17600: Standardize our EXPORT_OK 2021-07-16 08:58:47 +02:00
kohaversion.pl
…
mainpage.pl Bug 29020: Add link on the mainpage for users without admin access 2021-10-19 09:29:09 +02:00
package.json Bug 27939: Update yarn.lock file 2021-03-16 12:04:06 +01:00
rewrite-config.PL Bug 28519: Put CGI::Session::Serialize::yamlxs in lib directory 2021-06-17 10:07:36 +02:00
yarn.lock Bug 27939: Update yarn.lock file 2021-03-16 12:04:06 +01:00

README.md

Koha is a free software integrated library system (ILS).

Koha is distributed under the GNU GPL version 3 or later.

Note: Koha does not accept pull requests from git hosting sites.

Note: This project has its own bug tracker, to report a bug or submit a patch visit http://bugs.koha-community.org.

For guidelines on submitting patches for Koha please visit https://wiki.koha-community.org/wiki/SubmitingAPatch

The developers handbook can be found at https://wiki.koha-community.org/wiki/Developer_handbook

http://koha-community.org/

Koha Logo