View Issue Details

Related ChangesetsJump to NotesJump to History
This issue affects 1 person(s).
 4
IDProjectCategoryView StatusDate SubmittedLast Update
08922Bug reportsSurvey editingpublic2014-03-31 14:032014-04-04 10:26
Reportermdekker Assigned Tomdekker  
PrioritynormalSeverityminor 
Status closedResolutionfixed 
Product Version2.05+ 
Summary08922: KCFinder CSRF not always working
Description

When using the upload tab to upload an image in a text area the csrf is not working. When using the first tab, clicking browse server and then uploading it does work.

Additional Information

Simple fix: remove the upload tab

Background:
A hack was needed to insert the needed csrf token on the upload tab and this was not working when the image popup was closed and reopened. Since the upload is still available via the first tab and clicking browse, there is no need to keep the extra upload tab.

TagsNo tags attached.
Bug heat4
Complete LimeSurvey version number (& build)20140331
I will donate to the project if issue is resolvedNo
Browser
Database type & version.
Server OS (if known).
Webserver software & version (if known).
PHP Version.
Git branch / Pull Request URL

Users monitoring this issue

There are no users monitoring this issue.

Activities

mdekker

mdekker

2014-03-31 14:11

reporter   ~29620

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=14093
c_schmitz

c_schmitz

2014-04-04 10:26

administrator   ~29655

2.05+ Build 140404 released.

Related Changesets

LimeSurvey: master 740a49ce

2014-03-31 14:07

mdekker


Details Diff		 Fixed issue 08922: KCFinder CSRF not always working Affected Issues
08922
mod - application/helpers/admin/htmleditor_helper.php Diff File
mod - application/views/admin/survey/prepareEditorScript_view.php Diff File

Issue History

Date Modified Username Field Change
2014-03-31 14:03 mdekker New Issue
2014-03-31 14:03 mdekker Status new => assigned
2014-03-31 14:03 mdekker Assigned To => mdekker
2014-03-31 14:11 mdekker Changeset attached => LimeSurvey master 740a49ce
2014-03-31 14:11 mdekker Note Added: 29620
2014-03-31 14:11 mdekker Resolution open => fixed
2014-04-01 10:55 mdekker Status assigned => resolved
2014-04-04 10:26 c_schmitz Note Added: 29655
2014-04-04 10:26 c_schmitz Status resolved => closed
2019-11-01 17:25 c_schmitz Category Survey design => Survey editing