This issue has been created
There are 2 updates.
 
 
XWiki Platform / cid:jira-generated-image-avatar-9b90d4a9-b0cf-4062-a009-827921e229c6 XWIKI-24790 Open

An expired CSRF token is reported as a naming convention problem in the image style administration

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-8326b367-eff2-4d24-b44b-726323ae4b25 Manuel Leduc created this issue on 03/Sep/26 11:38
 
Summary: An expired CSRF token is reported as a naming convention problem in the image style administration
Issue Type: cid:jira-generated-image-avatar-9b90d4a9-b0cf-4062-a009-827921e229c6 Bug
Affects Versions: 15.8
Assignee: Unassigned
Components: Image
Created: 03/Sep/26 11:38
Priority: cid:jira-generated-image-static-major-a9f7880b-ef82-42f4-9c8d-d3ea8b622251 Major
Reporter: Manuel Leduc
Description:

Problem

The name validation request of the image style administration sends a CSRF token. Once that token has expired, the entity name validation page answers 401, and the administration handles that answer like any other - blaming the naming conventions for a problem that is in fact an expired token.

Steps to reproduce

  • Go to Administration / Content / Image Styles
  • Leave the page open long enough for the CSRF token to expire
  • Type a name in the "New Image Style" field

Actual result

The administration reports a naming convention problem, which is misleading. Creating the style would be rejected for the same expired token, but nothing says so.

Expected result

The administration tells the user that the page has to be reloaded, and keeps the creation button disabled since the creation itself would be rejected too.

 
 

2 updates

 
cid:jira-generated-image-avatar-8326b367-eff2-4d24-b44b-726323ae4b25 Changes by Manuel Leduc on 03/Sep/26 11:38
 
Fix Version: 18.8.0-rc-1
Assignee: Manuel Leduc