https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37064

            Bug ID: 37064
           Summary: Spurious CSRF error logged by 500.pl when a POST
                    request fails
 Change sponsored?: ---
           Product: Koha
           Version: Main
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P5 - low
         Component: Architecture, internals, and plumbing
          Assignee: koha-bugs@lists.koha-community.org
          Reporter: n...@bywatersolutions.com
        QA Contact: testo...@bugs.koha-community.org

I haven't been able to set things up to recreate on KTD, but in production:
1 - Set an email for a patron and enable HOLD notifications
2 - Edit the HOLD letter to use a spurious item field [% item.itemcopynumber %]
3 - Place a hold for patron and confirm
4 - Error in logs
    ERROR PROCESSING TEMPLATE: undef error - The method
Koha::Item->itemcopynumber is not covered by tests!
5 - But also:
    [WARN] Programming error - op 'cud-affect_reserve' must not start with
'cud-' for GET https://staff-library.provider.com/intraneterrors/500.pl
(referer: https://staff-library.provider.com/cgi-bin/koha/circ/returns.pl) at
/usr/share/koha/lib/Koha/Middleware/CSRF.pm line 82.

6 - The ErrorDocument middleware automatically transforms every request into a
GET - so suddenly the cud- op is rejected

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.
_______________________________________________
Koha-bugs mailing list
Koha-bugs@lists.koha-community.org
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to