c2c-oerpscenario team mailing list archive
-
c2c-oerpscenario team
-
Mailing list archive
-
Message #08099
[Bug 690514] [NEW] [trunk] CSRF check in 4091 breaks mod_proxy
Public bug reported:
The CSRF check won't work in most cases with mod_proxy - the host/ref is going to be different (e.g. 127.0.0.1)
Likely better way to do it is using a token/hidden field... I'd provide a patch but I haven't worked much with the web client yet.
** Affects: openobject-client-web
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of C2C
OERPScenario, which is subscribed to the OpenERP Project Group.
https://bugs.launchpad.net/bugs/690514
Title:
[trunk] CSRF check in 4091 breaks mod_proxy
Status in OpenObject Web Client:
New
Bug description:
The CSRF check won't work in most cases with mod_proxy - the host/ref is going to be different (e.g. 127.0.0.1)
Likely better way to do it is using a token/hidden field... I'd provide a patch but I haven't worked much with the web client yet.
Follow ups
-
[Bug 690514] Re: [trunk] CSRF check in 4091 breaks mod_proxy
From: Navrang Oza (Open ERP), 2011-06-24
-
[Bug 690514] Re: [trunk] CSRF check in 4091 breaks mod_proxy
From: Xavier ALT (Thamini), 2011-01-14
-
[Bug 690514] Re: [trunk] CSRF check in 4091 breaks mod_proxy
From: Open Net Sàrl, 2011-01-06
-
[Bug 690514] Re: [trunk] CSRF check in 4091 breaks mod_proxy
From: Xavier (Open ERP), 2011-01-06
-
[Bug 690514] Re: [trunk] CSRF check in 4091 breaks mod_proxy
From: Launchpad Bug Tracker, 2011-01-06
-
[Bug 690514] Re: [trunk] CSRF check in 4091 breaks mod_proxy
From: Julian Robbins, 2010-12-20
-
[Bug 690514] Re: [trunk] CSRF check in 4091 breaks mod_proxy
From: SKH(OpenERP), 2010-12-16
-
[Bug 690514] Re: [trunk] CSRF check in 4091 breaks mod_proxy
From: John B, 2010-12-15
-
[Bug 690514] Re: [trunk] CSRF check in 4091 breaks mod_proxy
From: Gwizo, 2010-12-15
-
Re: [Bug 690514] [NEW] [trunk] CSRF check in 4091 breaks mod_proxy
From: xrg, 2010-12-15
-
[Bug 690514] [NEW] [trunk] CSRF check in 4091 breaks mod_proxy
From: John B, 2010-12-15
References