[Koha-bugs] [Bug 36194] CSRF - svc

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Thu Feb 29 08:54:07 CET 2024


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36194

Jonathan Druart <jonathan.druart+koha at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jonathan.druart+koha at gmail.
                   |                            |com

--- Comment #2 from Jonathan Druart <jonathan.druart+koha at gmail.com> ---
(In reply to Nick Clemens from comment #1)
> https://wiki.koha-community.org/wiki/Coding_Guidelines#JS13:
> _Fetching_resources

Note that we do not necessarily need to use this method to fix the remaining
svc occurrences.
We can simply reject non-POST requests, or add a cud op when missing.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.


More information about the Koha-bugs mailing list