From 241fb630f1a170a5866ddcb4963b1f18508ad8e5 Mon Sep 17 00:00:00 2001
From: Lucas Gass <lucas@bywatersolutions.com>
Date: Tue, 9 Jan 2024 21:49:44 +0000
Subject: [PATCH] Bug 35752: Pass CSRF token to del_form

To test:

1. Have multiple additional content items ( news/HTML customization/Pages )
2. On one of the pages ( news/HTML customization/Pages ) select more than one item and try to delete using the 'Delete selected' button
3. You are redirected but nothing happens.
4. APPLY PATCH
5. Try again, this time you should be able to successfully delete additional-contents.

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Signed-off-by: Victor Grousset/tuxayo <victor@tuxayo.net>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
---
 .../intranet-tmpl/prog/en/modules/tools/additional-contents.tt   | 1 +
 1 file changed, 1 insertion(+)

diff --git a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/additional-contents.tt b/koha-tmpl/intranet-tmpl/prog/en/modules/tools/additional-contents.tt
index 0092df3bf8..8e513bc18a 100644
--- a/koha-tmpl/intranet-tmpl/prog/en/modules/tools/additional-contents.tt
+++ b/koha-tmpl/intranet-tmpl/prog/en/modules/tools/additional-contents.tt
@@ -377,6 +377,7 @@
     [% IF additional_contents.count %]
         <div class="page-section">
             <form id="del_form" method="post" action="/cgi-bin/koha/tools/additional-contents.pl">
+                [% INCLUDE 'csrf-token.inc' %]
                 <table id="table_additional_contents">
                     <thead>
                         <tr>
-- 
2.39.5