Uploaded image for project: '{RETIRED} XWiki Enterprise'
  1. {RETIRED} XWiki Enterprise
  2. XE-978

User avatar management does not work with enabled CSRF protection

    XMLWordPrintable

    Details

    • keywords:
      csrf
    • Similar issues:

      Description

      To reproduce:

      • enable CSRF protection
      • go to user profile
      • click on change avatar button
      • try to upload, select or delete some avatar

        Attachments

          Activity

            People

            Assignee:
            nickless Alex Busenius
            Reporter:
            nickless Alex Busenius
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: