ActionController::InvalidCrossOriginRequest: Security warning

[brian-kephart]

I'm experiencing an issue similar to this one. That link covers all the details, but basically I get this error whenever a crawler tries to access any js file that doesn't exist on the server, instead of a 404. All these requests are being routed to camaleon_cms/frontend#post according to my error logger. Note that even though that link refers to the response code as 500, it is actually 422.

Their fix is here.

This began occurring when I stopped using a 404 redirect in my site settings and created a custom app/apps/themes/my_theme/views/camaleon_cms/404.html.

Ruby 2.4.2
Rails 5.1.4
Camaleon git version 2b64ade

[owen2345]

The fix is correct, can you please make a pull request with the fix?

[brian-kephart]

I'm not having any luck. I'm unclear as to how to implement this in Camaleon, and using that code with minimal changes affects Camaleon's own error handling.