v2 music API CSRF prevention blocks modifying and deleting playlists
Bug #1154891 reported by
James Tait
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Ubuntu One Servers |
Confirmed
|
High
|
Unassigned | ||
Bug Description
"Although I was able to GET songs in a playlist, when I try to update:
PUT: httpResponseStatus 403 394 ms
request: url: https:/
contentType: application/json
idleTimeout: 30000
dataFormat: text
data: {"name":"newName"}
hdr: [ Authorization ] = OAuth auth_signature_
CSRF verification failed. Request aborted."
| tags: | added: u1-by-dev u1-music-player u1-on-production |
| Changed in ubuntuone-servers: | |
| status: | New → Confirmed |
| Changed in ubuntuone-servers: | |
| assignee: | Registry Administrators (registry) → nobody |
To post a comment you must log in.
