Kuali Rice Development
  1. Kuali Rice Development
  2. KULRICE-14287

XML ingester page does not work because of CSRF prevention

    Details

    • Type: Bug Fix Bug Fix
    • Status: Open Open
    • Priority: Major Major
    • Resolution: Unresolved
    • Affects Version/s: 2.3.10
    • Fix Version/s: None
    • Component/s: Development
    • Security Level: Public (Public: Anyone can view)
    • Labels:
      None
    • Similar issues:
      KULRICE-1130improve performance of xml ingestion
      KULRICE-2450XML Ingester does not display helpful error messages
      KULRICE-4331exporting Groups with XML option does not create a format that is recognized by the XML ingester
      KULRICE-5972Rice Dev: Going to XML Ingester screen gives error
      KULRICE-5188Need to remove ImmutableListAdapter and ImmutableCollectionAdapter from our service definitions and come up with a better solution because it is producing undesirable XML
      KULRICE-2634Implement support for better XML export, XML import and migration features
      KULRICE-10037CSV,XML,XLS file download buttons on collections does not work on inquiry screen
      KULRICE-7579Remoting of WorkflowRuleAttribute does not appear to be working well because WorkflowRuleAttributeHandlerService does not appear to be hooked up properly
      KULRICE-2632Fix error output display on XML Ingester and add additional field fields
    • KAI Review Status:
      Not Required
    • KTI Review Status:
      Not Required
    • Code Review Status:
      Not Required
    • Include in Release Notes?:
      Yes

      Description

      rice-middleware/web/src/main/webapp/core/WEB-INF/jsp/impex/ingester.jsp specifies

      <%@ page session="false" %>

      This prevents the CSRF tag from accessing the session-scoped CSRF token. Submitting the ingester form fails.

        Activity

        There are no entries against this issue.

          People

          • Assignee:
            Unassigned
            Reporter:
            Ken Geis
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:

              Structure Helper Panel