View Issue Details

Jump to NotesJump to History
This issue affects 1 person(s).
 6
IDProjectCategoryView StatusDate SubmittedLast Update
09627Bug reportsLimeSurvey Websitepublic2015-05-12 02:562015-05-12 10:34
Reporterlorenz1974 Assigned ToDenisChenu  
PriorityhighSeveritycrash 
Status closedResolutionnot fixable 
Product Version2.05+ 
Summary09627: When in IFRAME amd mobile devices with IOS, "BAD REQUEST - The CSRF token could not be verified"
Description

Some questionnaires when are embedded inside an iframe and users click on the first "Next", they receive the error "BAD REQUEST - The CSRF token could not be verified". Webserver log a "400" error.
Same questionnaires without the iframe have no problems.
Tipically it seems to happen with iOS and mobile devices.

Steps To Reproduce

Unknown.
Try here http://tiroideinprimopiano.it/tiroide/questionario-tiroideinprimopiano
with a mobile device.

Additional Information

Main site with the IFRAME and Limesurvey site have two different domains.
I have already place "enableCsrfValidation" as false.

'config'=>array(
// Disable CSRF protection
'request' => array( 'enableCsrfValidation'=>false )
)

TagsNo tags attached.
Attached Files
apache.log (23,187 bytes)
Bug heat6
Complete LimeSurvey version number (& build)2.05+ Build 150508
I will donate to the project if issue is resolvedNo
Browsermany
Database type & versionMysql
Server OS (if known)CentOS
Webserver software & version (if known) Apache/2.2.15
PHP VersionPHP 5.3.3
Git branch / Pull Request URL

Users monitoring this issue

lorenz1974

Activities

c_schmitz

c_schmitz

2015-05-12 09:02

administrator   ~32171

Not a bug. This is caused by the browser not allowing third-party cookies. The survey is hosted on a different domain than the main page.
DenisChenu

DenisChenu

2015-05-12 09:12

developer   ~32172

Last edited: 2015-05-12 10:34

@lorenz1974
Look at : https://manual.limesurvey.org/Optional_settings#Request_settings

It's a Yii config, not a LS config. Manual issue: updated, please update it if you find better sentence.

This not fix the issue, onky in some condition. With competely disallow external cookies : it disallow session too . Not fixable

Issue History

Date Modified Username Field Change
2015-05-12 02:56 lorenz1974 New Issue
2015-05-12 02:56 lorenz1974 Status new => assigned
2015-05-12 02:56 lorenz1974 Assigned To => c_schmitz
2015-05-12 02:56 lorenz1974 File Added: apache.log
2015-05-12 03:01 lorenz1974 Issue Monitored: lorenz1974
2015-05-12 09:02 c_schmitz Note Added: 32171
2015-05-12 09:02 c_schmitz Status assigned => closed
2015-05-12 09:02 c_schmitz Resolution open => not fixable
2015-05-12 09:12 DenisChenu Assigned To c_schmitz => DenisChenu
2015-05-12 09:12 DenisChenu Note Added: 32172
2015-05-12 09:12 DenisChenu Status closed => feedback
2015-05-12 09:12 DenisChenu Resolution not fixable => reopened
2015-05-12 09:12 DenisChenu Status feedback => closed
2015-05-12 09:12 DenisChenu Resolution reopened => no change required
2015-05-12 10:33 DenisChenu Status closed => feedback
2015-05-12 10:33 DenisChenu Resolution no change required => reopened
2015-05-12 10:34 DenisChenu Note Edited: 32172
2015-05-12 10:34 DenisChenu Status feedback => closed
2015-05-12 10:34 DenisChenu Resolution reopened => not fixable