search

MetaMask / metamask-mobile

Mobile web browser providing access to websites that use the Ethereum blockchain
https://metamask.io
Other
2.17k stars 1.12k forks source link

CSRF token is not accepted on metamask mobile app browser #5014

Closed uraxlizard closed 1 year ago

uraxlizard commented 2 years ago

Description Ajax post request is returning 'Page Expired' when you try to use metmask mobile app browser on Android. On iOS is working. A registration/login flow was created with web3 auth. It was used csrf in order to protect requests, but metmask browser is not accepting them.

To Reproduce Try to make post request with csrf(cors). Bare in mind that this problem occurs only on android devices.

Expected behavior It is expected to be able to capture CSRF and complete the request as expected.

Smartphone:

to be added after bug submission by internal support / PM Severity

tommasini commented 2 years ago

Probably related to https://github.com/MetaMask/metamask-mobile/issues/4979

cortisiko commented 2 years ago

Thanks for reporting @uraxlizard! can you try to reproduce on v5.8 or v5.9?

chrisleewilcox commented 2 years ago

@omnat need product review. See @sethkfman for details.

github-actions[bot] commented 1 year ago

This issue has been automatically marked as stale because it has not had recent activity in the last 90 days. It will be closed in 7 days. Thank you for your contributions.

github-actions[bot] commented 1 year ago

This issue was closed because it has been stalled for 7 days with no activity. If you feel this was closed in error please reopen and provide evidence on the current production app. Thank you for your contributions.