https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36838 Jonathan Druart <jonathan.druart@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jonathan.druart@gmail.com -- You are receiving this mail because: You are watching all bug changes.

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36838 --- Comment #1 from Owen Leonard <oleonard@myacpl.org> --- Created attachment 166638 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=166638&action=edit Bug 36838: Add CSRF token to tags review AJAX requests The JavaScript for approving or rejecting tags in the staff interface's tag review interface lacked a CSRF token for the POSTed requests. This patch adds the token for "approve" and "reject" operations. To test, apply the patch and clear your browser cache if necessary. - If necessary, enable tags in system preferences. - Log in to the OPAC and submit multiple tags on various records. - In the staff interface, go to Tools -> Tags. - Test the process of approving and rejecting tags by clicking the buttons in each row of the table of tags. - The browser console should show no errors, and the lists of approved and rejected tags should correctly show the tags you moderated. -- You are receiving this mail because: You are watching all bug changes.

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36838 Jonathan Druart <jonathan.druart@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #166638|0 |1 is obsolete| | --- Comment #2 from Jonathan Druart <jonathan.druart@gmail.com> --- Created attachment 166639 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=166639&action=edit Bug 36838: Add CSRF token to tags review AJAX requests The JavaScript for approving or rejecting tags in the staff interface's tag review interface lacked a CSRF token for the POSTed requests. This patch adds the token for "approve" and "reject" operations. To test, apply the patch and clear your browser cache if necessary. - If necessary, enable tags in system preferences. - Log in to the OPAC and submit multiple tags on various records. - In the staff interface, go to Tools -> Tags. - Test the process of approving and rejecting tags by clicking the buttons in each row of the table of tags. - The browser console should show no errors, and the lists of approved and rejected tags should correctly show the tags you moderated. Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org> -- You are receiving this mail because: You are watching all bug changes.

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36838 Katrin Fischer <katrin.fischer@bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|RM_priority | -- You are receiving this mail because: You are watching all bug changes.

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36838 --- Comment #3 from Katrin Fischer <katrin.fischer@bsz-bw.de> --- Pushed for 24.05! Well done everyone, thank you! -- You are receiving this mail because: You are watching all bug changes.

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36838 Bug 36838 depends on bug 34478, which changed state. Bug 34478 Summary: Full CSRF protection https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34478 What |Removed |Added ---------------------------------------------------------------------------- Status|Pushed to main |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are watching all bug changes.