Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

plone.protect error while adding an annotation to the document in the viewer #58

Open
pabo3000 opened this issue Nov 21, 2015 · 2 comments

Comments

@pabo3000
Copy link

This error is only visible when running your instance in foreground. And after typing c into the pdb it works. (Plone 5)

2015-11-21 02:17:14 ERROR plone.protect Error checking for CSRF. Transaction will be aborted since the request is now unsafe:
Traceback (most recent call last):
  File "/home/pab/.buildout/eggs/plone.protect-3.0.9-py2.7.egg/plone/protect/auto.py", line 148, in check
    return self._check()
  File "/home/pab/.buildout/eggs/plone.protect-3.0.9-py2.7.egg/plone/protect/auto.py", line 170, in _check
    check(self.request, manager=self.key_manager)
  File "/home/pab/.buildout/eggs/plone.protect-3.0.9-py2.7.egg/plone/protect/authenticator.py", line 113, in check
    raise Forbidden('Form authenticator is invalid.')
Forbidden: Form authenticator is invalid.
@vangheem
Copy link
Member

Not sure what you're talking about. There is no pdb statement in the code.

Are you using the latest version? The authenticator should be getting added to the code.

@pabo3000
Copy link
Author

I use Products.PDBDebugMode (sorry, forgot to mention.) and run the instance in foreground. If I try to add a text annotation in the docviewer then a "Forbidden" is risen. The other available actions in the viewer have the same issue (Manage sections, delete section, ...). If the authenticator is regarded as invalid although the action is processed then that might be a security issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants