Your message dated Thu, 4 Jul 2019 17:25:55 +0300
with message-id <20190704142555.GA4738@note>
and subject line Re: monit: Invalid CSRF Token error on web interface
has caused the Debian Bug report #890683,
regarding monit: Invalid CSRF Token error on web interface
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
890683: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=890683
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: monit
Version: 1:5.20.0-6
Severity: normal
Dear Maintainer,
I am always getting this error when clicking start/stop/restart/disable buttons
on the web interface:
Invalid CSRF Token
This makes the web interface read-only, actions cannot be carried out.
This error is already fixed in sid, version 1:5.25.1-1
-- System Information:
Debian Release: 9.3
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.9.0-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages monit depends on:
ii libc6 2.24-11+deb9u1
ii libpam0g 1.1.8-3.6
ii libssl1.1 1.1.0f-3+deb9u1
ii lsb-base 9.20161125
ii zlib1g 1:1.2.8.dfsg-5
monit recommends no packages.
Versions of packages monit suggests:
ii exim4-daemon-light [mail-transport-agent] 4.89-2+deb9u3
pn sysvinit-core <none>
--- End Message ---
--- Begin Message ---
Sorry, but backport wasn't sponsored.
On Fri, 21 Dec 2018 14:10:37 +0300 Sergey B Kirpichev <[email protected]>
wrote:
> BTW, backport issue is here:
> https://bugs.debian.org/887350
>
> Backport was uploaded to mentors:
> https://mentors.debian.net/package/monit
>
> On Fri, 21 Dec 2018 11:26:18 +0300 Sergey B Kirpichev <[email protected]>
> wrote:
> > tag 890683 + upstream
> > thanks
> >
> > On Sat, 17 Feb 2018 18:28:37 +0100 Peter Baranyi <[email protected]>
> > wrote:
> > > I am always getting this error when clicking start/stop/restart/disable
> > > buttons
> > > on the web interface:
> > > Invalid CSRF Token
> > > This makes the web interface read-only, actions cannot be carried out.
> > > This error is already fixed in sid, version 1:5.25.1-1
> >
> > I think, that the problem is fixed in
> > https://bitbucket.org/tildeslash/monit/issues/495/invalid-csrf-check
> >
> > So, everything should work in stable, if you will use a dedicated
> > domain for the web interface. Let me know if this workaround doesn't
> > work.
> >
> > For now, I don't think that issue is severe enough and there will
> > be port of this fix to stable. I hope, monit's backport will be available
> > soon, so you can try it.
> >
> >
>
>
--- End Message ---
