craftcms / craftcms/cms

[4.2.2]: Missing CSRF token when saving changes within slidouts

Open
#11,854 1 comment 0 reactions 1 assignee View on GitHub

@brianjhanson is already working on this.

Since Aug 31, 2022.

bug craft4 need more info
Dominant language
PHP
Stars
3.6k
Forks
705
Avg merge
1d 5h
Merged PRs (30d)
134

Description

What happened?
Description

When you double click on an entry in an entry field within a matrix block, the slideout for editing opens. When you made your changes and click 'save', the request fails because there is no CSRF token within the payload or the HTTP headers. If you do the same with entries in entry fields not in an matrix block, everything works as expected.

Steps to reproduce
  1. Double click on an entry in a field within a matrix block, edit someting in the opened slideout and save.
Expected behavior

The changes will be saved.

Actual behavior

400 Bad request error because of missing CSRF token.

Craft CMS version

4.2.2

PHP version

8.1.7

Operating system and version

Linux 5.13.0-1031-aws

Database type and version

MySQL 5.7.38

Image driver and version

Imagick 3.7.0 (ImageMagick 6.9.10-23)

Installed plugins and versions

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.