[Koha-bugs] [Bug 29543] Self-checkout allows returning everybody's loans

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29543

--- Comment #52 from Marcel de Rooy <m.de.rooy at rijksmuseum.nl> ---
L362
            csrf_token           => Koha::Token->new->generate_csrf( {
session_id => scalar $query->cookie('CGISESSID') . $patron->cardnumber, id =>
$patron->userid } ),

Where is the corresponding csrf check?

-- 
You are receiving this mail because:
You are watching all bug changes.