Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-55710

Sidebar-Link plugin file upload blocked by CSRF protection

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Minor Minor
    • sidebar-link-plugin
    • Ubuntu 18
      Kubernetes 1.11
      Jenkins version 2.150.1
      sidebar-link-plugin 1.10
      Chrome Version 71.0.3578.98 (Official Build) (64-bit)

      When on the /configure page when trying to upload a new image to /userContent using the sidebar-link plugin the following error is generated.

      HTTP ERROR 403
      Problem accessing /plugin/sidebar-link/upload. Reason:
      No valid crumb was included in the request
      Powered by Jetty:// 9.4.z-SNAPSHOT

       

      The result of this error is due to CSRF protection in Jenkins 2.x.  The current workaround is for a user to complete the following steps:

      • Visit /configureSecurity page
      • Disable Prevent Cross Site Request Forgery exploits ** temporarily
      • Visit /configure upload the image desired

       

          [JENKINS-55710] Sidebar-Link plugin file upload blocked by CSRF protection

          Bradley Herrin created issue -

          Kalle Niemitalo added a comment -

          This bug cannot be reproduced in Sidebar Link versions 1.11.0 to 2.0.0 because those suffer from https://github.com/jenkinsci/sidebar-link-plugin/issues/28 instead.

          Kalle Niemitalo added a comment - This bug cannot be reproduced in Sidebar Link versions 1.11.0 to 2.0.0 because those suffer from https://github.com/jenkinsci/sidebar-link-plugin/issues/28 instead.

          Kalle Niemitalo added a comment -

          PR #36 fixes this and is awaiting review.

          Kalle Niemitalo added a comment - PR #36 fixes this and is awaiting review.
          Kalle Niemitalo made changes -
          Remote Link New: This issue links to "PR #36 - Fix icon upload iframe in global config (Web Link)" [ 27398 ]
          Kalle Niemitalo made changes -
          Status Original: Open [ 1 ] New: In Progress [ 3 ]
          Kalle Niemitalo made changes -
          Assignee New: Kalle Niemitalo [ kon ]
          Kalle Niemitalo made changes -
          Status Original: In Progress [ 3 ] New: In Review [ 10005 ]

          Kalle Niemitalo added a comment -

          The PR was merged.

          Kalle Niemitalo added a comment - The PR was merged.
          Kalle Niemitalo made changes -
          Resolution New: Fixed [ 1 ]
          Status Original: In Review [ 10005 ] New: Fixed but Unreleased [ 10203 ]

          Kalle Niemitalo added a comment -

          Released in Sidebar Link 2.1.0.

          Kalle Niemitalo added a comment - Released in Sidebar Link 2.1.0.
          Kalle Niemitalo made changes -
          Released As New: https://github.com/jenkinsci/sidebar-link-plugin/releases/tag/sidebar-link-2.1.0
          Status Original: Fixed but Unreleased [ 10203 ] New: Resolved [ 5 ]

            kon Kalle Niemitalo
            bcherrin Bradley Herrin
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: