https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40980
--- Comment #7 from Pedro Amorim <[email protected]> --- Created attachment 190350 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=190350&action=edit Bug 40980: [ALTERNATIVE] Sanitize operators param Ensure it does not contain 'cud-login' Test plan, k-t-d with elastic search: 1) Make sure you're logged out 2) Access a search results page directly e.g.: http://localhost:8081/cgi-bin/koha/catalogue/search.pl?q=music 3) You're prompted to login, login. 4) You're shown the search results directly, click a facet result (any facet) 5) You get a Error 403: Programming error - op 'cud-login' must not start with 'cud-' for GET 6) Apply patch, restart plack, repeat -- You are receiving this mail because: You are watching all bug changes. _______________________________________________ Koha-bugs mailing list [email protected] https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
