Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can't retrieve token with extensions that works after a POST request #147

Open
CDanilo25 opened this issue Jun 29, 2021 · 0 comments
Open

Comments

@CDanilo25
Copy link

Describe the bug
Certain Chrome Extensions (I only found LastPass) conflict with this Plugin at POST. The Token is not set as a POST value, so the Token verification always fails. By disabling LastPass, the Token verification is successful. Because LastPass changes the page after a login request, this issue happens during a login phase.

To Reproduce

  • Install and enable LastPass from the Chrome Webstore.
  • Login to LastPass.
  • Open a page with CSRF Protector enabled with login inputs. LastPass should be present as an icon inside the inputs.
  • After the login info is sent to the server, the Token verification fails.

Additional context

  • PHP Version: 7.2
  • Browser: Google Chrome, last version at the moment of writing.

I had this issue with LastPass, but it may happen with other browser plugins as well. It seems to override the Javascript function which retrieves the token and prepare it to be sent alongside the other POST values.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant