https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40980
Marcel de Rooy <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #189766|0 |1 is obsolete| | Attachment #190350|0 |1 is obsolete| | --- Comment #10 from Marcel de Rooy <[email protected]> --- Created attachment 190351 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=190351&action=edit Bug 40980: [ALTERNATIVE] Sanitize operators param Ensure it does not contain 'cud-login' Test plan, k-t-d with elastic search: 1) Make sure you're logged out 2) Access a search results page directly e.g.: http://localhost:8081/cgi-bin/koha/catalogue/search.pl?q=music 3) You're prompted to login, login. 4) You're shown the search results directly, click a facet result (any facet) 5) You get a Error 403: Programming error - op 'cud-login' must not start with 'cud-' for GET 6) Apply patch, restart plack, repeat Signed-off-by: Marcel de Rooy <[email protected]> -- You are receiving this mail because: You are watching all bug changes. _______________________________________________ Koha-bugs mailing list [email protected] https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs website : http://www.koha-community.org/ git : http://git.koha-community.org/ bugs : http://bugs.koha-community.org/
