Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Loading a non-existing js/css file may lead to csrf token errors #34575

Closed
juliusknorr opened this issue Oct 13, 2022 · 2 comments
Closed

Loading a non-existing js/css file may lead to csrf token errors #34575

juliusknorr opened this issue Oct 13, 2022 · 2 comments
Assignees
@juliusknorr

Comments

@juliusknorr
Copy link
Member

Encountered in nextcloud/text#3175

Due to our default redirect to the login page users may experience using an invalid CSRF token while browsing a page if one of the requested assets does not exist and therefore redirects to the login page.

Investigation to be continued on the server side ...
@juliusknorr juliusknorr self-assigned this Oct 13, 2022
@CarlSchwan
Copy link
Member

We should return 404 already discussed in #33048 (comment)

@juliusknorr
Copy link
Member Author

Then let me close this as a duplicate 🎉

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@juliusknorr juliusknorr

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@juliusknorr @CarlSchwan