Re: configuring lighttpd proxy for standalone roundup server
"John P. Rouillard" <[email protected]>
| Newsgroups | gmane.comp.bug-tracking.roundup.user |
|---|---|
| Message-ID | <[email protected]> |
Hi Dave: In message <CAETHaKrN_oXvTNA2iGiCprwRK4wwiKPJaYiTkXbJYvsZV4TMoQ@mail.gmail.com> , Dave Bender writes: >Sorry forgot to add: > >127.0.0.1 - - [15/Apr/2023 22:28:00] "GET >/name/@@file/glyphicons-halflings.png HTTP/1.1" 200 - >127.0.0.1 - - [15/Apr/2023 22:28:03] "GET >/name/user?@template=forgotten HTTP/1.1" 200 - >2023-04-15 22:28:08,610 ERROR csrf Referer header check failed for >user2. Value=https://example.com/tracker/name/user?@template=forgotten Thanks for including this. That's what I expect. The referer is using https, but your web setting is using http so they don't match. I don't know why you are seeing two URL's in the web interface. You should only see one just like you do in the log. I just ran the Referer test case under the debugger to verify that Roundup is just repeating the Referer header value. Also the log message disproves my thought that lighttpd was redirecting from http to https. Then it was representing this in the Referer header with the dual URL's, separated by a newline. -- -- rouilj John Rouillard =========================================================================== My employers don't acknowledge my existence much less my opinions.