[Bug 209349] www/roundcube: access to this resource is secured against CSRF

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209349

            Bug ID: 209349
           Summary: www/roundcube: access to this resource is secured
                    against CSRF
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs at FreeBSD.org
          Reporter: wxl at bikefriday.com

Created attachment 170074
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=170074&action=edit
www/roundcube 1.1.4 patch for CSRF error on logout

Logouts in Roundcube 1.1.4 don't complete cleanly. Instead, the following error
message appears:

> Request Check Failed
> For your protection, access to this resource is secured against CSRF.
> If you see this, you probably didn't log out before leaving the web
> application.
> Human interaction is now required to continue.
> Please contact your server-administrator.

This is related to a known bug now fixed in the 1.1.5 release:
https://github.com/roundcube/roundcubemail/issues/4956

In lieu of pulling down the new release, the attached patch will solve the
problem.

-- 
You are receiving this mail because:
You are the assignee for the bug.