Uploaded image for project: '{RETIRED} XWiki Enterprise'
  1. {RETIRED} XWiki Enterprise
  2. XE-978

User avatar management does not work with enabled CSRF protection

          Details

          • keywords:
            csrf
          • Similar issues:

            Description

            To reproduce:

            • enable CSRF protection
            • go to user profile
            • click on change avatar button
            • try to upload, select or delete some avatar

              Attachments

                Activity

                  People

                  • Assignee:
                    nickless Alex Busenius
                    Reporter:
                    nickless Alex Busenius
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    0 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: