gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bug 36207: (RM follow-up) CSRF correction 

I think there was a rebase issue here where we split the form into two
forms instead of one.  This patch returns us to one form with two
different submit options (one for selected tags and one per tag) that
both trigger the confirmation modal before submitting to the controller.

Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
(cherry picked from commit 0ac23a6247)
Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
This commit is contained in:
Martin Renvoize 2024-06-11 16:13:36 +01:00 committed by Lucas Gass
parent 8e9652665f
commit 38b618c4a5
1 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
koha-tmpl/opac-tmpl/bootstrap/en/modules/opac-tags.tt
View File

@ -127,7 +127,9 @@
[% END # /add_op %]
[% IF ( MY_TAGS ) %]
<form method="post" action="opac-tags.pl">
<form id="deletetags" name="deletetags" method="post" action="opac-tags.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="cud-del" />
<table id="mytagst" class="table table-bordered table-striped">
<caption>Your tags</caption>
<thead>
@ -183,10 +185,6 @@
</table>
<input type="submit" value="Remove selected tags" class="btn btn-danger remove">
</form>
<form id="deletetags" name="deletetags" method="post" action="/cgi-bin/koha/opac-tags.pl">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="cud-del" />
</form>
[% END # /MY_TAGS %]
</div> <!-- / .usertags -->
</div> <!-- / .span10/12 -->