https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37827
Bug ID: 37827
Summary: Switch OPAC download list form from POST to GET
Change sponsored?: ---
Product: Koha
Version: Main
Hardware: All
OS: All
Status: NEW
Severity: normal
Priority: P3
Component: OPAC
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
Depends on: 36192
Blocks: 37728
We meant to not have any forms that post without an op starting with cud-, but
because of bug 37728 we missed a few, like the hidden form to download a list
in the OPAC.
There's no visible reason why it even needs a form to submit, rather than just
having the menu be a list of links the way the staff client does it, but that's
a problem for another bug. Here, we just need to switch it from a post to a
get, so we can land the fix to the test for things posting without a cud- op.
Referenced Bugs:
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36192
[Bug 36192] [OMNIBUS] CSRF Protection for Koha
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37728
[Bug 37728] More "op" are missing in POSTed forms
--
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/
