Koha-clms/catalogue
Pedro Amorim c597046a9e
Bug 40980: [ALTERNATIVE] Sanitize operators param
Ensure it does not contain 'cud-login'

Test plan, k-t-d with elastic search:
1) Make sure you're logged out
2) Access a search results page directly e.g.:
http://localhost:8081/cgi-bin/koha/catalogue/search.pl?q=music
3) You're prompted to login, login.
4) You're shown the search results directly, click a facet result (any facet)
5) You get a Error 403:
Programming error - op 'cud-login' must not start with 'cud-' for GET
6) Apply patch, restart plack, repeat

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
2025-12-17 13:24:32 -07:00
..
ISBDdetail.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
MARCdetail.pl Bug 41153: Clean up catalogue/MARCdetail.pl 2025-11-07 10:54:09 -07:00
detail.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
export.pl Bug 39485: Fix wide character in print-warn in opac-export 2025-04-23 09:35:13 +02:00
getitem-ajax.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
image.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
imageviewer.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
issuehistory.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
item-export.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
itemsearch.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
labeledMARCdetail.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
moredetail.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
search-history.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
search.pl Bug 40980: [ALTERNATIVE] Sanitize operators param 2025-12-17 13:24:32 -07:00
showelastic.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
showmarc.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
stockrotation.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00
updateitem.pl Bug 40163: Fix several http addresses in the code docs 2025-09-23 16:21:29 -06:00