Questions tagged [csrf]

All questions related to Cross-site request forgery, one-click attack or session riding in Sitecore

Filter by
Sorted by
Tagged with
0
votes
0answers
28 views

System.Web.Mvc.HttpAntiForgeryException: The provided anti-forgery token was meant for user “”, but the current user is “”

I'm seeing cases where the submission of a generic public facing Sitecore Form (such as a contact form) causes two variations of this issue, where either the user or current user is empty and the ...
0
votes
0answers
162 views

The CSRF cookie value did not match the CSRF parameter value [duplicate]

I got an error while clicking the item in Sitecore, but when I refreshed the page, I was able to click the item this time. Exception: Sitecore.Security.AntiCsrf.Exceptions.PotentialCsrfException ...
2
votes
1answer
1k views

Sitecore Anti Csrf Cookie

We are using Web forms and would like to know if we could reuse/enable Sitecore's built in Anti CSRF token mechanism for the website instead of limiting it's scope to Sitecore itself.. I couldn't ...
5
votes
3answers
2k views

The CSRF cookie value did not match the CSRF parameter value exception in Chrome

One of our developers is getting this error randomly when perusing through his local development instance in Sitecore 8.1 Update 3 using Chrome. I am not getting the exception at all on my machine on ...