Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 06 May 2016 23:36:52 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-ports-bugs@FreeBSD.org
Subject:   [Bug 209349] www/roundcube: access to this resource is secured against CSRF
Message-ID:  <bug-209349-13@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D209349

            Bug ID: 209349
           Summary: www/roundcube: access to this resource is secured
                    against CSRF
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs@FreeBSD.org
          Reporter: wxl@bikefriday.com

Created attachment 170074
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D170074&action=
=3Dedit
www/roundcube 1.1.4 patch for CSRF error on logout

Logouts in Roundcube 1.1.4 don't complete cleanly. Instead, the following e=
rror
message appears:

> Request Check Failed
> For your protection, access to this resource is secured against CSRF.
> If you see this, you probably didn't log out before leaving the web
> application.
> Human interaction is now required to continue.
> Please contact your server-administrator.

This is related to a known bug now fixed in the 1.1.5 release:
https://github.com/roundcube/roundcubemail/issues/4956

In lieu of pulling down the new release, the attached patch will solve the
problem.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-209349-13>