[production][package#submit_request_dialog] Security warning: an embedded <script> tag on another site requested protected JavaScript. If you...

openSUSE / open-build-service

Build and distribute Linux packages from sources in an automatic, consistent and reproducible way #obs

https://openbuildservice.org

GNU General Public License v2.0

936 stars 440 forks source link

[production][package#submit_request_dialog] Security warning: an embedded <script> tag on another site requested protected JavaScript. If you... #6969

Open dmarcoux opened 5 years ago

dmarcoux commented 5 years ago

package#submit_request_dialog threw this 0 times

Security warning: an embedded <script> tag on another site requested protected JavaScript. If you know what you're doing, go ahead and disable forgery protection on this action to permit cross-origin JavaScript embedding.

https://build.opensuse.org/package/submit_request_dialog/home:czerw:branches:systemsmanagement:terraform/terraform?revision=3"

~See this exception on Errbit~

See this exception on Errbit

saraycp commented 5 years ago

How I reproduced it:

Go to any package show page
Open Submit Package link in a new tab

Doing so in the old UI it shows JavaScript code. In the new UI it shows a blank page but it raises an error that we get on Errbit.

The modal for Submit Package is not exactly the same kind of modal we are using for Branch Package (this link doesn't get the same error), for example. I believe that using the same kind of modal will fix it.

saraycp commented 5 years ago

It's addressed on this PR: #7467

eduardoj commented 4 years ago

Still happens in Errbit.