https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43505 --- Comment #15 from Jonathan Druart <jonathan.druart@gmail.com> --- Created attachment 205467 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=205467&action=edit Bug 43505: Koha::QA - CSRF 'op in forms' Consolidate xt/find-missing-csrf.t (CSRF token check) and xt/find-missing-op-in-forms.t (op parameter / "cud-" prefix check) into a single test, renamed to xt/find-csrf-issues.t. Both checks are now covered by one Koha::QA::Security::CSRF checker, which reports the following possible errors: * missing_csrf_token * missing_op * and invalid_op_value Test plan: `prove xt/find-csrf-issues.t` => It still passes! => It still catches: * a missing CSRF token * a missing/invalid op parameter -- You are receiving this mail because: You are watching all bug changes.