Koha/svc
David Cook 6bf867b3ea Bug 34369: Require CSRF token for updating system preferences
This patch adds the requirements that updating a system preference
requires a CSRF token. (Also, adding and deleting local system preferences.)

0. Apply patch
1. koha-plack --reload kohadev
2. Add local system preference
3. Update local system preference
4. Delete local system preference
5. Update normal system preference
6. Note no errors

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Matt Blenkinsop <matt.blenkinsop@ptfs-europe.com>
2023-09-28 09:18:30 +00:00
..
cataloguing Bug 31682: Silence automatic linker warn 2022-10-11 10:41:23 -03:00
club Bug 29859: Fix club/enroll 2022-04-05 17:36:59 +02:00
config Bug 34369: Require CSRF token for updating system preferences 2023-09-28 09:18:30 +00:00
letters
mana
members Bug 30063: Remove svc/members/search 2022-04-04 09:47:01 +02:00
records Bug 32631: Error when previewing record during batch record modification 2023-01-31 14:26:35 +00:00
virtualshelves Bug 25498: Add transfer button on intranet 2022-07-19 11:25:23 -03:00
article_request
authentication
authorised_values
barcode
bib Bug 29697: Replace some missing occurrences 2022-07-25 09:30:30 -03:00
bib_framework
bib_profile
checkin
checkout_notes
checkouts Bug 33944: Don't fetch item object unless using recalls 2023-07-18 11:11:10 +00:00
convert_report Bug 34533: jsdiff library missing from guided reports page 2023-08-31 10:11:32 +00:00
cover_images Bug 29771: Remove trivial cases 2022-03-08 23:03:34 -10:00
creator_batches
holds Bug 24860: Add hold's item group to holds table on circulation.pl and moremember.pl 2022-11-04 19:39:57 -03:00
import_bib Bug 15869: Change framework on overlay 2023-02-08 16:34:09 +00:00
localization
new_bib Bug 29697: Replace some missing occurrences 2022-07-25 09:30:30 -03:00
problem_reports
recall Bug 30924: Add missing branchtransfers.reason value for recall cancellation 2022-06-13 10:30:51 -03:00
renew Bug 29051: Update svc api to allow seen renewals 2022-07-08 15:31:39 -03:00
report Bug 26669: (QA follow-up) Update last run when report run by name 2022-04-04 16:23:46 +02:00
return_claims Bug 29931: (follow-up) Fix svc/checkouts and return_claims too 2022-03-15 22:30:50 -10:00
split_callnumbers