gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bug 37374: (follow-up) Add csrf token and op to form 

This patch adds a hidden op input and csrf token to the clubs hold
request form.

Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
(cherry picked from commit 83966f4273)
Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
This commit is contained in:
Martin Renvoize 2024-07-25 10:54:36 +01:00 committed by Lucas Gass
parent 938a38f4a2
commit d4c114453f
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
koha-tmpl/intranet-tmpl/prog/en/modules/reserve/request.tt
View File

@ -303,6 +303,8 @@
<fieldset class="rows">
<legend>Hold details</legend>
<form action="/api/v1/clubs/[% club.id | html %]/holds" method="post" name="form" id="club-request-form">
[% INCLUDE 'csrf-token.inc' %]
<input type="hidden" name="op" value="cud-noop" />
[% IF ( multi_hold ) %]
<input type="hidden" name="request" value="any"/>