@julian Error seems to be occuring mostly to users using Safari (both mobile and desktop - MacOS). I don't have access to server right now, but will post additional data ASAP.
iFrame: Attemp to login fails (invalid csrf token)
When I open NodeBB through an iFrame using IE 11 and attempt to login, im presented with an "invalid csrf token" error and login fails. But when I try it with Google Chrome, everything works as expected. Anybody have an idea why that is?
PS. I tested on a fresh IE (reseted ALL my settings, including cookies, etc.)
Is this only through an IFrame? Regular invocation of NodeBB is fine?
@julian yeah only through iFrame
the request headers look fine, it has x-csrf-token and Cookie (express.side=...)
Sounds like an IE bug to me.
@agarcia17 Google is your friend.
Query: IE iframe csrf error