Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-97216

Using drag & drop to import LARs causes CSRF token error

    Details

    • Fix Priority:
      5

      Description

      Steps to reproduce:

      1. Export LAR for Hello World portlet
      2. Add a new page
      3. Add Hello World portlet
      4. Import LAR by drag and dropping into the iframe

      Expected Result: LAR imports successfully

      Actual Result: Import hangs indefinitely. The following console error shows up.

      ERROR [http-nio-8080-exec-5][JSONAction:89] User 20129 did not provide a valid CSRF token for com.liferay.portal.action.UpdateLayoutAction

      Range bug was introduced: https://github.com/liferay/liferay-portal/compare/c0c13433600398fed8768f539aa8212978f7409c...3494ceef661706be9cd77707fc8febb9a9b0cfd2

      Tested on:
      Tomcat 9.0.17 + MySQL 5.7.25
      Portal master SHA: 9cc5c9e823ccf5c834d5bbfc2e3b37cdd6aabc0d

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  31 weeks, 1 day ago

                  Packages

                  Version Package
                  7.2.X
                  Master