GitHub user dosubot[bot] added a comment to the discussion: CSR FError: 400 Bad 
Request for  /superset/log/?explode=events&dashboard_id=

<!-- Answer -->
I found a similar discussion titled "[400 Bad Request: The CSRF session token 
is missing](https://github.com/apache/superset/discussions/32815)" which is 
currently open 
<sup>[[1]](https://github.com/apache/superset/discussions/32815)</sup>. 
Additionally, there is a closed issue that suggests a solution for CSRF token 
errors: disabling CSRF protection by setting `TALISMAN_ENABLED` to `False`. 
This can be done by adding `TALISMAN_ENABLED: "False"` to `extraEnv` in 
`values.yaml` if using a Helm chart, or by directly modifying the 
`superset/config.py` file to set `TALISMAN_ENABLED = False` 
<sup>[[2]](https://github.com/apache/superset/issues/22873)</sup>.

However, disabling CSRF protection can have security implications, as it 
removes a layer of protection against Cross-Site Request Forgery attacks. If 
you choose to disable it, ensure that your application is otherwise secure and 
that you understand the potential risks. Alternatively, you might want to 
investigate why the CSRF token is missing and ensure that the token is 
correctly generated and included in requests.


<!-- Dosu Comment Footer -->
*To continue talking to [Dosu](https://dosu.dev), mention @dosu.*

---
<sup>Help Dosu learn! Give it feedback: [Great 
Response](https://app.dosu.dev/response-feedback/c0232495-9530-4af1-94df-16eec3c345b2?feedback_type=great_response)
 | [Irrelevant 
Answer](https://app.dosu.dev/response-feedback/c0232495-9530-4af1-94df-16eec3c345b2?feedback_type=irrelevant_answer)
 | [Incorrect 
Sources](https://app.dosu.dev/response-feedback/c0232495-9530-4af1-94df-16eec3c345b2?feedback_type=incorrect_sources)
 | [Too 
Verbose](https://app.dosu.dev/response-feedback/c0232495-9530-4af1-94df-16eec3c345b2?feedback_type=too_verbose)
 | 
[Hallucination](https://app.dosu.dev/response-feedback/c0232495-9530-4af1-94df-16eec3c345b2?feedback_type=hallucination)
 | [Bug 
Report](https://app.dosu.dev/response-feedback/c0232495-9530-4af1-94df-16eec3c345b2?feedback_type=bug_report)
 | 
[Other](https://app.dosu.dev/response-feedback/c0232495-9530-4af1-94df-16eec3c345b2?feedback_type=other)</sup>


GitHub link: 
https://github.com/apache/superset/discussions/33386#discussioncomment-13070586

----
This is an automatically sent email for notifications@superset.apache.org.
To unsubscribe, please send an email to: 
notifications-unsubscr...@superset.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org
For additional commands, e-mail: notifications-h...@superset.apache.org

Reply via email to