[Bug 36280] New: Viewing batch of staged records broken: CSRF token error
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36280 Bug ID: 36280 Summary: Viewing batch of staged records broken: CSRF token error Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Cataloging Assignee: koha-bugs@lists.koha-community.org Reporter: victor@tuxayo.net QA Contact: testopia@bugs.koha-community.org CC: m.de.rooy@rijksmuseum.nl 1. Stage a batch 2. When it's done, click on "view batch" 3. Page loads but pops an alert that says "403: Forbidden" and table stays empty network tool show an XHR to /cgi-bin/koha/tools/batch_records_ajax.pl that returns 403. The content can be save in an HTML file and opened to show a page that says:
An error has occurred! Error 403 Programming error - No CSRF token passed for POST
Going to "Manage staged MARC records" and view an existing batch has the same outcome. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36280 Victor Grousset/tuxayo <victor@tuxayo.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |34478 Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 [Bug 34478] Full CSRF protection -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36280 Jonathan Druart <jonathan.druart@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE CC| |jonathan.druart@gmail.com --- Comment #1 from Jonathan Druart <jonathan.druart@gmail.com> --- *** This bug has been marked as a duplicate of bug 36195 *** -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36280 --- Comment #2 from Victor Grousset/tuxayo <victor@tuxayo.net> --- Thanks, it's a catch all ticket, that's why I didn't find it. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36280 --- Comment #3 from Victor Grousset/tuxayo <victor@tuxayo.net> --- issue reported in the pad, section "Testing Reports (36195):" -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36280 Bug 36280 depends on bug 34478, which changed state. Bug 34478 Summary: Full CSRF protection https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
participants (1)
-
bugzilla-daemon@bugs.koha-community.org