[Koha-bugs] [Bug 31001] "CGI::param called in list context" warning in basket.pl flooding error log

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=31001

David Nind <david at davidnind.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |david at davidnind.com
  Text to go in the|                            |This fixes the cause of a
      release notes|                            |warning message that
                   |                            |appears in the system logs
                   |                            |when emailing an order to a
                   |                            |vendor (Acquisitions >
                   |                            |[select a vendor] > [select
                   |                            |a basket] > E-mal order).
                   |                            |The warning message was
                   |                            |"[WARN] CGI::param called
                   |                            |in list context from
                   |                            |/kohadevbox/koha/acqui/bask
                   |                            |et.pl line 175, this can
                   |                            |lead to vulnerabilities.
                   |                            |See the warning in
                   |                            |"Fetching the value or
                   |                            |values of a single named
                   |                            |parameter" at
                   |                            |/usr/share/perl5/CGI.pm
                   |                            |line 414.".

--- Comment #3 from David Nind <david at davidnind.com> ---
Testing notes (using koha-testing-docker):

- The warning message appears in this log file:
/var/log/koha/kohadev/plack-intranet-error.log

- Note: Lots of other messages will be included in the log if email is not
configured.

-- 
You are receiving this mail because:
You are watching all bug changes.