Questions tagged [csrf]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
22 views

Generate CSRF Token Asynchronously

EE 5.4.0 I'm developing an admin dashboard using ReactJS. I have a class that I'm using as an API to handle actions sent from the frontend. Part of this frontend is a member section that has a logout ...
Shayne's user avatar
  • 317
1 vote
1 answer
130 views

Solspace Freeform return path {csrf_token}

I am having an issue, probably parse related. Using Solspace Freeform I am trying to include the {csrf_token} in the return path but its not working.. my code is as follows for the form: {exp:...
Mark's user avatar
  • 317
0 votes
2 answers
479 views

Prevent CSRF token expiring for EE powered kiosk

We are building a 'kiosk' interface into a site powered by EE (2.8.1) which makes various POST requests to other site templates as part of the flow. The problem we are having is that because the ...
Mike Vaux's user avatar
  • 111
0 votes
1 answer
171 views

Freeform Form expired error in Google Chrome only

I am using an {exp:freeform:form} tag for contact requests and am getting this error when submitting the form in Google Chrome only: "This form has expired. Please refresh and try again." Because ...
mjr's user avatar
  • 660
0 votes
1 answer
256 views

CSRF bug on IE, unable to login to to CP EE 2.9.2

Got a weird one, on this site http://www.limbsandthings.com, Internet Explorer customers (all versions, even 10&11) are unable to search, add to their cart, and login to the control panel. ...
Patrick Pohler's user avatar
0 votes
1 answer
132 views

solspace super search 'super_search_keywords' and 'csrf_token' tags not parsed

EE 2.7.2 MSM I've just installed SOlspace Super Search and added the simple form example from teh docs but neither the {super_search_keywords} or {csrf_token} tags are getting parsed, both are ...
wot's user avatar
  • 321
1 vote
1 answer
920 views

CSRF Conflict Creating Form and Logout Errors

The contact form on a site I am currently developing was displaying an error when trying to submit and says the form has expired. Based on feedback I found in various forums, the workaround I have ...
Amanda's user avatar
  • 11
2 votes
2 answers
228 views

XSS vulnerability - malicious cookie value

One of the sites I'm working on was subject to a penetration test and this is one of the items of feedback: I understand the issue in theory however as I've never had to deal with this sort of thing ...
FuriousD's user avatar
  • 121
1 vote
2 answers
2k views

Load XML via jquery.ajax causes an error

But not a javascript error, I think its something internal to EE? Bear with me as this is a strange error I'm seeing. I have a few pages in EE that are set type XML and they output XML dynamically ...
Robbiegod's user avatar
  • 121