[4.2.2]: Missing CSRF token when saving changes within slidouts
Open
@brianjhanson is already working on this.
Since Aug 31, 2022.
bug
craft4
need more info
- Dominant language
- PHP
- Stars
- 3.6k
- Forks
- 705
- Avg merge
- 1d 5h
- Merged PRs (30d)
- 134
Description
What happened?
Description
When you double click on an entry in an entry field within a matrix block, the slideout for editing opens. When you made your changes and click 'save', the request fails because there is no CSRF token within the payload or the HTTP headers. If you do the same with entries in entry fields not in an matrix block, everything works as expected.
Steps to reproduce
- Double click on an entry in a field within a matrix block, edit someting in the opened slideout and save.
Expected behavior
The changes will be saved.
Actual behavior
400 Bad request error because of missing CSRF token.
Craft CMS version
4.2.2
PHP version
8.1.7
Operating system and version
Linux 5.13.0-1031-aws
Database type and version
MySQL 5.7.38
Image driver and version
Imagick 3.7.0 (ImageMagick 6.9.10-23)
Installed plugins and versions
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.