Good catch from Jonathan. See comment11.
Authorities detail should pass a CSRF token to authorities-home when
deleting a record without linked biblios.
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Passing the token with GET is not a good way to do, but nothing quick to
replace that.
Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| auth_finder.pl | ||
| authorities-home.pl | ||
| authorities-list.pl | ||
| authorities.pl | ||
| blinddetail-biblio-search.pl | ||
| detail-biblio-search.pl | ||
| detail.pl | ||
| export.pl | ||
| merge.pl | ||
| merge_ajax.pl | ||
| ysearch.pl | ||