March 2024 - Koha-bugs - lists.koha-community.org

[Bug 36084] Pass CSRF token to SVC scripts (1/2)
by bugzilla-daemon＠bugs.koha-community.org 01 Mar '24

01 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36084 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |36194 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36194 [Bug 36194] CSRF - svc (2/2) -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36084] Pass CSRF token to SVC scripts (1/2)
by bugzilla-daemon＠bugs.koha-community.org 01 Mar '24

01 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36084 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on|36094 | Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36094 [Bug 36094] svc/authentication needs adjustements -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36084] Pass CSRF token to SVC scripts (1/2)
by bugzilla-daemon＠bugs.koha-community.org 01 Mar '24

01 Mar '24

1 0

[Bug 36102] Protect login forms from CSRF attacks
by bugzilla-daemon＠bugs.koha-community.org 01 Mar '24

01 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36102 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)|Pushed to master for |24.05.00 released in|24.05.00. | --- Comment #40 from Jonathan Druart <jonathan.druart(a)gmail.com> --- Pushed to master for 24.05.00. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 36102] Protect login forms from CSRF attacks
by bugzilla-daemon＠bugs.koha-community.org 01 Mar '24

01 Mar '24

1 0

[Bug 34478] Full CSRF protection
by bugzilla-daemon＠bugs.koha-community.org 01 Mar '24

01 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to master --- Comment #181 from Jonathan Druart <jonathan.druart(a)gmail.com> --- Pushed to master for 24.05.00. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 34478] Full CSRF protection
by bugzilla-daemon＠bugs.koha-community.org 01 Mar '24

01 Mar '24

1 0

[Bug 35955] New CSRF token generated everytime we need one
by bugzilla-daemon＠bugs.koha-community.org 01 Mar '24

01 Mar '24

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=35955 Jonathan Druart <jonathan.druart(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Koha |Architecture, internals, | |and plumbing Version(s)| |24.05.00 released in| | Product|Koha security |Koha Status|Passed QA |Pushed to master Group|Koha security | --- Comment #11 from Jonathan Druart <jonathan.druart(a)gmail.com> --- Pushed to master for 24.05.00. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 35890] AutoLocation system preference + setting the library IP field - can still login and unexpected results
by bugzilla-daemon＠bugs.koha-community.org 01 Mar '24

01 Mar '24

1 0

[Bug 34426] Add tests for CSRF checks missing
by bugzilla-daemon＠bugs.koha-community.org 01 Mar '24

01 Mar '24

1 0