Koha-community/Koha
13
7
Fork 0
Code Issues Releases Wiki Activity

Bug 36207: (RM follow-up) CSRF correction

Browse source 
I think there was a rebase issue here where we split the form into two
forms instead of one.  This patch returns us to one form with two
different submit options (one for selected tags and one per tag) that
both trigger the confirmation modal before submitting to the controller.

Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
This commit is contained in:
Martin Renvoize 2024-06-11 16:13:36 +01:00
parent 7f8e71e82b
commit 0ac23a6247
Signed by: martin.renvoize
GPG key ID: 422B469130441A0F
1 changed files with 3 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-tags.tt
View file

@ -127,7 +127,9 @@
[% END # /add_op %]
[% IF ( MY_TAGS ) %]
<form method="post" action="opac-tags.pl">
<form id="deletetags" name="deletetags" method="post" action="opac-tags.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="cud-del" />
<table id="mytagst" class="table table-bordered table-striped">
<caption>Your tags</caption>
<thead>
@ -183,10 +185,6 @@
</table>
<input type="submit" value="Remove selected tags" class="btn btn-danger remove">
</form>
<form id="deletetags" name="deletetags" method="post" action="/cgi-bin/koha/opac-tags.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="cud-del" />
</form>
[% END # /MY_TAGS %]
</div> <!-- / .usertags -->
</div> <!-- / .span10/12 -->