https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43311 --- Comment #2 from Owen Leonard <oleonard@myacpl.org> --- Created attachment 203788 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=203788&action=edit Bug 43311: Add CSRF header to opac-memberentry.tt API call The OPAC does not have the api-client.js infrastructure yet. As a minimal fix, this adds the CSRF-TOKEN header manually to the jQuery.ajax PUT call for updating guarantor checkout visibility. The token is read from the csrf-token meta tag which is already present in the OPAC head. Test plan: 1. Apply patch 2. Log into the OPAC as a patron with a guarantor 3. Go to Your account > Personal details 4. Change the "Allow guarantor to see checkouts" setting => SUCCESS: Setting updated without 403 error 5. Sign off :-D Signed-off-by: Owen Leonard <oleonard@myacpl.org> -- You are receiving this mail because: You are watching all bug changes.