[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[EP-tech] Ask about CSRF. Always get error when edit phrases Editor
Hi Agung Prasetyo Wibowo,
This could be one of two issues:
1. You have updated lib directory versions of the various JavaScript
files that are patched in the two GitHub links you included but there
are other versions that take precedence so these changes will not
propagate through to the version at
http://HOSTNAME/javascript/auto-3.4.0.js.? Look for files with the same
name in the equivalent pub_lib, site_lib or archives/ARCHIVE_NAME
directories.
2. auto-3.4.0.js is still cached and you need to hard refresh the page
to get these changes to come.? I have tried doing this as I know your
repository hostname (i.e. Ctrl+Shift+R for a hard refresh) and this
seems to make no difference and I cannot find the string 'csrf' anywhere
in auto-3.4.0.js.? One other issue with caching might be that
archives/ARCHIVE_NAME/html/en/javascript/auto.js and the files in
archives/ARCHIVE_NAME/html/en/javascript/auto/ cannot be overwritten due
to a file permission issues.? If you delete all these files, this may
resolve the issue and give you the new version of auto-3.4.0.js that has
the CSRF protection code.
Regards
David Newman
On 23/07/2020 09:13, Ajunk Pracetio via Eprints-tech wrote:
> Hi,
> I'd like to ask. My EPrints version is 3.4. I want to edit one of the
> field on phrases editor, but always get error
>
> *Cross-Site Request Forgery (CSRF) was detected whilst processing your
> last request and therefore its action was not authorised. *
>
> The screenshot like this :
> image.png
> I already try
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints3.4%2Fcommit%2F95ed6bee24fb3c138ada80684f0503e54f739c41&data=01%7C01%7C%7C2e35c975617c4535a81408d82f07e769%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=HC7lX7Wuz%2FAKihxgbNOIXc%2F%2Br968W0BShkf2kJwnh8M%3D&reserved=0
> <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints3.4%2Fcommit%2F95ed6bee24fb3c138ada80684f0503e54f739c41&data=01%7C01%7C%7C2e35c975617c4535a81408d82f07e769%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=HC7lX7Wuz%2FAKihxgbNOIXc%2F%2Br968W0BShkf2kJwnh8M%3D&reserved=0>
> and
> https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints3.4%2Fcommit%2F6968a5690ccd01f6ffe819a5a626ebe3b04c9ed1&data=01%7C01%7C%7C2e35c975617c4535a81408d82f07e769%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=uiy%2B00dZz2dU%2Fdc7dgDdk3nu70vvSILngf6yGNKjqPY%3D&reserved=0
> <https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Feprints%2Feprints3.4%2Fcommit%2F6968a5690ccd01f6ffe819a5a626ebe3b04c9ed1&data=01%7C01%7C%7C2e35c975617c4535a81408d82f07e769%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=uiy%2B00dZz2dU%2Fdc7dgDdk3nu70vvSILngf6yGNKjqPY%3D&reserved=0>,
> but error still persists.
>
> Please help about this issue.
>
> Thank you.
>
> Best regards,
> Agung Prasetyo Wibowo.
>
> *** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
> *** Archive: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=01%7C01%7C%7C2e35c975617c4535a81408d82f07e769%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=3jyDhBWoas4EkTEKwPF2lMHH3gY%2FX62%2BXRtgp%2BQHQIQ%3D&reserved=0
> *** EPrints community wiki: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=01%7C01%7C%7C2e35c975617c4535a81408d82f07e769%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=o0IvFdJ%2B6u7dzuAnmJ06eqg72LMHeE3kE4UmZku1Nbw%3D&reserved=0
--
This email has been checked for viruses by AVG.
https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.avg.com%2F&data=01%7C01%7C%7C2e35c975617c4535a81408d82f07e769%7C4a5378f929f44d3ebe89669d03ada9d8%7C0&sdata=05WMrqwWqP6Azav2OCnRrOfw7%2BQyrIZ%2FMlnjOe8VnTU%3D&reserved=0
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachments/20200723/b9e255ee/attachment-0001.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 23116 bytes
Desc: not available
Url : http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachments/20200723/b9e255ee/attachment-0001.png