Questions tagged [csrf]
The csrf tag has no usage guidance.
9
questions
0
votes
1
answer
24
views
Generate CSRF Token Asynchronously
EE 5.4.0
I'm developing an admin dashboard using ReactJS. I have a class that I'm using as an API to handle actions sent from the frontend. Part of this frontend is a member section that has a logout ...
- 3,587
1
vote
1
answer
920
views
CSRF Conflict Creating Form and Logout Errors
The contact form on a site I am currently developing was displaying an error when trying to submit and says the form has expired.
Based on feedback I found in various forums, the workaround I have ...
CommunityBot
- 1
0
votes
2
answers
479
views
Prevent CSRF token expiring for EE powered kiosk
We are building a 'kiosk' interface into a site powered by EE (2.8.1) which makes various POST requests to other site templates as part of the flow.
The problem we are having is that because the ...
- 1,859
1
vote
1
answer
130
views
Solspace Freeform return path {csrf_token}
I am having an issue, probably parse related. Using Solspace Freeform I am trying to include the {csrf_token} in the return path but its not working.. my code is as follows for the form:
{exp:...
- 6,139
0
votes
1
answer
171
views
Freeform Form expired error in Google Chrome only
I am using an {exp:freeform:form} tag for contact requests and am getting this error when submitting the form in Google Chrome only:
"This form has expired. Please refresh and try again."
Because ...
- 6,139
0
votes
1
answer
256
views
CSRF bug on IE, unable to login to to CP EE 2.9.2
Got a weird one, on this site http://www.limbsandthings.com, Internet Explorer customers (all versions, even 10&11) are unable to search, add to their cart, and login to the control panel. ...
CommunityBot
- 1
0
votes
1
answer
132
views
solspace super search 'super_search_keywords' and 'csrf_token' tags not parsed
EE 2.7.2
MSM
I've just installed SOlspace Super Search and added the simple form example from teh docs but neither the {super_search_keywords} or {csrf_token} tags are getting parsed, both are ...
- 6,139
2
votes
2
answers
228
views
XSS vulnerability - malicious cookie value
One of the sites I'm working on was subject to a penetration test and this is one of the items of feedback:
I understand the issue in theory however as I've never had to deal with this sort of thing ...
CommunityBot
- 1
1
vote
2
answers
2k
views
Load XML via jquery.ajax causes an error
But not a javascript error, I think its something internal to EE?
Bear with me as this is a strange error I'm seeing. I have a few pages in EE that are set type XML and they output XML dynamically ...
- 121