ionize/ionize — Issue #31: CSRF Protection prevents loading of articles on the admin panel
Author: kojiroh
Created: 2012-02-26 09:44:43+00:00
State: open

I also posted this on the forums, but here goes.

While the CSRF protection was enabled, when I tried to edit an article on the admin panel, I realized that the AJAX request to admin/tree/get was responded with the following (response code 500);

>

An Error Was Encountered

>

>

The action you have requested is not allowed.

As a result, the article tree was not loaded. Investigating a little bit further made me realize that the request doesn't even get to the get() function on the tree controller.