Questions tagged [csrf]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1
vote
1answer
105 views

Solspace Freeform return path {csrf_token}

I am having an issue, probably parse related. Using Solspace Freeform I am trying to include the {csrf_token} in the return path but its not working.. my code is as follows for the form: {exp:...
0
votes
2answers
393 views

Prevent CSRF token expiring for EE powered kiosk

We are building a 'kiosk' interface into a site powered by EE (2.8.1) which makes various POST requests to other site templates as part of the flow. The problem we are having is that because the ...
0
votes
1answer
158 views

Freeform Form expired error in Google Chrome only

I am using an {exp:freeform:form} tag for contact requests and am getting this error when submitting the form in Google Chrome only: "This form has expired. Please refresh and try again." Because ...
0
votes
1answer
230 views

CSRF bug on IE, unable to login to to CP EE 2.9.2

Got a weird one, on this site http://www.limbsandthings.com, Internet Explorer customers (all versions, even 10&11) are unable to search, add to their cart, and login to the control panel. ...
0
votes
1answer
132 views

solspace super search 'super_search_keywords' and 'csrf_token' tags not parsed

EE 2.7.2 MSM I've just installed SOlspace Super Search and added the simple form example from teh docs but neither the {super_search_keywords} or {csrf_token} tags are getting parsed, both are ...
1
vote
1answer
804 views

CSRF Conflict Creating Form and Logout Errors

The contact form on a site I am currently developing was displaying an error when trying to submit and says the form has expired. Based on feedback I found in various forums, the workaround I have ...
2
votes
2answers
187 views

XSS vulnerability - malicious cookie value

One of the sites I'm working on was subject to a penetration test and this is one of the items of feedback: I understand the issue in theory however as I've never had to deal with this sort of thing ...
1
vote
2answers
2k views

Load XML via jquery.ajax causes an error

But not a javascript error, I think its something internal to EE? Bear with me as this is a strange error I'm seeing. I have a few pages in EE that are set type XML and they output XML dynamically ...