Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[production][package#submit_request_dialog] Security warning: an embedded <script> tag on another site requested protected JavaScript. If you... #6969

Open
dmarcoux opened this issue Feb 12, 2019 · 3 comments
Assignees
Labels
Bug Frontend Things related to the OBS RoR app

Comments

@dmarcoux
Copy link
Contributor

dmarcoux commented Feb 12, 2019

package#submit_request_dialog threw this 0 times

Security warning: an embedded <script> tag on another site requested protected JavaScript. If you know what you're doing, go ahead and disable forgery protection on this action to permit cross-origin JavaScript embedding.

https://build.opensuse.org/package/submit_request_dialog/home:czerw:branches:systemsmanagement:terraform/terraform?revision=3"

See this exception on Errbit

See this exception on Errbit

@dmarcoux dmarcoux added Bug Frontend Things related to the OBS RoR app labels Feb 12, 2019
@hennevogel hennevogel added the P2 If possible, assign this to yourself and fix it ASAP label Feb 13, 2019
@saraycp saraycp self-assigned this Apr 29, 2019
@saraycp
Copy link
Contributor

saraycp commented May 2, 2019

How I reproduced it:

  • Go to any package show page
  • Open Submit Package link in a new tab

Doing so in the old UI it shows JavaScript code. In the new UI it shows a blank page but it raises an error that we get on Errbit.

The modal for Submit Package is not exactly the same kind of modal we are using for Branch Package (this link doesn't get the same error), for example. I believe that using the same kind of modal will fix it.

@saraycp
Copy link
Contributor

saraycp commented May 3, 2019

It's addressed on this PR: #7467

@eduardoj
Copy link
Member

eduardoj commented Sep 3, 2020

Still happens in Errbit.

@eduardoj eduardoj reopened this Sep 3, 2020
@hennevogel hennevogel removed the P2 If possible, assign this to yourself and fix it ASAP label Mar 29, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug Frontend Things related to the OBS RoR app
Projects
None yet
Development

No branches or pull requests

4 participants