Se buscan traductoras/es para Girala.net!

arbocenc · 2 Julio, 2022 19:13

Pues es verdad! He encontrado lo que podría ser el origen (o una pista) del error. Cuando tenga un rato trataré de solucionarlo y os lo comento

github.com/WeblateOrg/weblate

CSRF error on all POST requests

opened 12:02PM - 20 Mar 18 UTC

closed 02:25PM - 21 Mar 18 UTC

rbu

question

I have set up weblate using the documentation without docker. It is running from… a virtualenv, served by gunicorn with an nginx in front of it. HTTPS is set up in front (I am using ```correct.example.com``` here for the correct HTTPS hostname), the following settings are changed from the default settings: ``` DEBUG = False ADMINS = ... DATABASES { ... 'ENGINE': 'django.db.backends.mysql' } BASE_DIR = ... TIME_ZONE = 'Europe/Berlin' SECRET_KEY = ... ENABLE_HTTPS = True ALLOWED_HOSTS = ['correct.example.com'] LOGIN_REQUIRED_URLS (uncommented example) LOGIN_REQUIRED_URLS_EXCEPTIONS (uncommented example) ``` ### Expected behaviour I can login ### Actual behaviour When I attempt a login: "CSRF verification failed. Request aborted." I have observed the following: - Every time I reload, the CSRF token in the HTML changes even when I have ```CSRF_USE_SESSIONS = True```. The session cookie stays identical. - On a single response, the "Set-cookie: csrftoken" header and the CSRF token in the HTML is different when I have ```CSRF_USE_SESSIONS = False``` - ```ENABLE_HTTPS = False``` or ```CSRF_COOKIE_SECURE = False``` do not help - With debugging enabled, I can see the following log messages: ```lib/python2.7/site-packages/django/template/defaulttags.py:66: UserWarning: A {% csrf_token %} was used in a template, but the context did not provide the value. This is usually caused by not using RequestContext.``` as well as ```Forbidden (Referer checking failed - https://correct.example.com/ does not match any trusted origins.): /accounts/register/``` ### Server configuration Please paste the output of command `./manage.py list_versions` over here * Weblate 2.19.1 * Python 2.7.5 * Django 1.11.11 * six 1.11.0 * social-auth-core 1.7.0 * social-auth-app-django 2.1.0 * django-appconf 1.0.2 * Translate Toolkit 2.3.0 * Whoosh 2.7.4 * defusedxml 0.5.0 * Git 1.8.3.1 * Pillow (PIL) 1.1.7 * dateutil 2.7.0 * lxml 4.2.0 * django-crispy-forms 1.7.2 * compressor 2.2 * djangorestframework 3.7.7 * user-agents 1.1.0 * pytz 2018.3 * pyuca N/A * python-bidi 0.4.0 * pyLibravatar N/A * PyYAML 3.12 * Database backends: django.db.backends.mysql <bountysource-plugin> --- Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/56266284-csrf-error-on-all-post-requests?utm_campaign=plugin&utm_content=tracker%2F253393&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F253393&utm_medium=issues&utm_source=github). </bountysource-plugin>