devilry / devilry-django

Devilry project main repository
http://devilry.org
BSD 3-Clause "New" or "Revised" License
51 stars 24 forks source link

CSRF token incorrect for file upload #1314

Closed torgeirl closed 1 week ago

torgeirl commented 2 weeks ago

Under certain conditions, the CSRF token from the 'X-Csrftoken' HTTP header is incorrect, leading to the frontend presenting an error message to the uploadee. Still unclear how to re-produce the exact conditions, but it seems to mostly be triggered by the latest Chrome verions.

The upload mechanism was re-worked in Devilry 5.4 (#1219). My guess is that the issue has something to do with the cookie handling for the file uploader.