Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-40344

Leaving a page open past session expiry fills the logs on the master with "Found invalid crumb" warnings

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Minor Minor
    • core
    • None

      I noticed that I had thousands of WARNING messages in my master logs this morning because some users are leaving Jenkins home pages open past the user's session expiry.

      I understand that part of the problem here is the busy-wait looping on /ajaxBuildQueue, but finding an entire log file filled with this garbage seems like a bug

      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:05:46 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxBuildQueue. Returning 403.
      Dec 09, 2016 4:05:46 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:05:46 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxExecutors. Returning 403.
      Dec 09, 2016 4:05:51 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:05:51 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxBuildQueue. Returning 403.
      Dec 09, 2016 4:05:51 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:05:51 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxExecutors. Returning 403.
      Dec 09, 2016 4:05:56 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:05:56 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxBuildQueue. Returning 403.
      Dec 09, 2016 4:05:56 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:05:56 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxExecutors. Returning 403.
      Dec 09, 2016 4:06:01 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:06:01 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxBuildQueue. Returning 403.
      Dec 09, 2016 4:06:01 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:06:01 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxExecutors. Returning 403.
      Dec 09, 2016 4:06:06 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:06:06 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxBuildQueue. Returning 403.
      Dec 09, 2016 4:06:06 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:06:06 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxExecutors. Returning 403.
      Dec 09, 2016 4:06:11 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:06:11 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxBuildQueue. Returning 403.
      Dec 09, 2016 4:06:11 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:06:11 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxExecutors. Returning 403.
      Dec 09, 2016 4:06:16 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:06:16 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxBuildQueue. Returning 403.
      Dec 09, 2016 4:06:16 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:06:16 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxExecutors. Returning 403.
      Dec 09, 2016 4:06:21 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:06:21 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxBuildQueue. Returning 403.
      Dec 09, 2016 4:06:21 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:06:21 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxExecutors. Returning 403.
      Dec 09, 2016 4:06:26 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:06:26 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxBuildQueue. Returning 403.
      Dec 09, 2016 4:06:26 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:06:26 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxExecutors. Returning 403.
      Dec 09, 2016 4:06:31 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:06:31 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxBuildQueue. Returning 403.
      Dec 09, 2016 4:06:31 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: Found invalid crumb 2c7b06359e83df2535c0520c1ae79753.  Will check remaining parameters for a valid one...
      Dec 09, 2016 4:06:31 PM hudson.security.csrf.CrumbFilter doFilter
      WARNING: No valid crumb was included in request for /ajaxExecutors. Returning 403.
      

          [JENKINS-40344] Leaving a page open past session expiry fills the logs on the master with "Found invalid crumb" warnings

          R. Tyler Croy created issue -
          Daniel Beck made changes -
          Link New: This issue is duplicated by JENKINS-40380 [ JENKINS-40380 ]
          Oleg Nenashev made changes -
          Link New: This issue is related to JENKINS-40817 [ JENKINS-40817 ]
          Daniel Beck made changes -
          Assignee New: Daniel Beck [ danielbeck ]
          Daniel Beck made changes -
          Remote Link New: This issue links to "PR 3049 (Web Link)" [ 17783 ]
          Daniel Beck made changes -
          Status Original: Open [ 1 ] New: In Progress [ 3 ]
          Daniel Beck made changes -
          Status Original: In Progress [ 3 ] New: In Review [ 10005 ]
          Daniel Beck made changes -
          Resolution New: Fixed [ 1 ]
          Status Original: In Review [ 10005 ] New: Resolved [ 5 ]
          Daniel Beck made changes -
          Labels New: lts-candidate
          Oliver Gondža made changes -
          Labels Original: lts-candidate
          CloudBees Inc. made changes -
          Remote Link New: This issue links to "CloudBees Internal OSS-1788 (Web Link)" [ 18572 ]

            danielbeck Daniel Beck
            rtyler R. Tyler Croy
            Votes:
            4 Vote for this issue
            Watchers:
            15 Start watching this issue

              Created:
              Updated:
              Resolved: