Koha-clms/koha-tmpl
Tomás Cohen Arazi cf825d3829
Bug 42739: Add CSRF-TOKEN header to OPAC ratings.js fetch call
The ratings.js file uses raw fetch() to POST to the REST API without
including the CSRF-TOKEN header. This will fail once CSRF enforcement
is enabled on the REST API.

Test plan:
1. Apply patch
2. Enable star ratings in OPAC (StarRatings syspref)
3. Log in to the OPAC
4. Rate a biblio using the star widget
=> SUCCESS: Rating is saved without errors
5. Sign off :-D

Signed-off-by: Tomás Cohen Arazi <tomascohen@theke.io>
Signed-off-by: David Nind <david@davidnind.com>

Signed-off-by: Jonathan Druart <jonathan.druart@bugs.koha-community.org>
Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
2026-07-07 16:07:36 -06:00
..
intranet-tmpl Bug 42659: Use biblio-title.inc for displaying title at checkin 2026-07-07 12:58:59 -06:00
opac-tmpl Bug 42739: Add CSRF-TOKEN header to OPAC ratings.js fetch call 2026-07-07 16:07:36 -06:00