Koha/cataloguing
Janusz Kaczmarek bba164856c
Bug 38030: stocknumberAV.pl fails with CSRF protection
The value builder stocknumberAV.pl does not work after applying the CSRF
protection. In console, it generates entries like:

POST
http://localhost:8081/cgi-bin/koha/cataloguing/plugin_launcher.pl
[HTTP/1.1 403 Forbidden 188ms]

Test plan:
==========
1. Modify the MARC bibliographic framework for the default framework by
   choosing stocknumberAV.pl as plugin for subfield 952 $i.
2. In Authorized values, add a new category 'INVENTORY'.  Add a new
   entry there, e.g. 'ABC', with any number in Description (eg. 123).
3. Find any bibliographic record, make sure it uses the default framework.
   If not set the framework accordingly.
4. Edit an item linked to this record.  Go to the 'i - Inventory number'
   subfield.  You should see three dots on the right.  In the input field
   put ABC and click the three dots.
5. Nothing happens.  You can check in the browser console--there should
   be a message like:
   POST http://FQDN:8081/cgi-bin/koha/cataloguing/plugin_launcher.pl
   [HTTP/1.1 403 Forbidden 188ms]
6. Apply the patch; restart_all.  Refresh the browser window.
7. Repeat p. 4.  You should now get the next sequence number next to
   the 'ABC' (i.e. ABC 0000000124 or similar).

Sponsored-by: Ignatianum University in Cracow
Signed-off-by: Roman Dolny <roman.dolny@jezuici.pl>
Signed-off-by: David Cook <dcook@prosentient.com.au>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
2024-10-22 12:06:50 +02:00
..
value_builder Bug 38030: stocknumberAV.pl fails with CSRF protection 2024-10-22 12:06:50 +02:00
addbiblio.pl Bug 38211: frameworkcode must be set before read 2024-10-22 12:06:45 +02:00
addbooks.pl
additem.pl Bug 36498: Tidy cataloguing/additem.pl 2024-06-27 14:04:48 +02:00
cataloging-home.pl Bug 34288: Allow access to the cataloguing module with tools permission 2023-07-18 12:46:53 -03:00
concerns.pl
editor.pl Bug 33375: Quote reserved keyword 'rank' in advanced editor 2023-04-14 11:35:26 -03:00
linkitem.pl Bug 34478: Add 'op' to catalogue/MARCdetail 2024-03-01 10:58:28 +01:00
merge.pl Bug 33036: REST API: Merge biblio records implements merging of records 2024-03-18 11:03:39 +01:00
merge_ajax.pl
moveitem.pl Bug 34478: Add 'op' to cataloguing/moveitem 2024-03-01 10:58:29 +01:00
plugin_launcher.pl Bug 24879: Add check_cookie_auth when missing 2024-04-03 17:05:50 +02:00
ysearch.pl Bug 35835: Fix shebang in cataloguing/ysearch.pl 2024-01-26 15:14:03 +01:00
z3950_auth_search.pl Bug 34478: op =~ ^cud- in pl/pm 2024-03-01 10:56:11 +01:00
z3950_search.pl Bug 34478: op =~ ^cud- in pl/pm 2024-03-01 10:56:11 +01:00