Forum Issues

[Klaus]

@george-k said in Forum Issues:

@klaus I just got it on my desktop.

Nothing but "error".

I tried to post in the "I love my daughter" thread and that's what I got.

I noticed a few unusual things in the server log that look like they may be related to the issue.

Dec 20 18:13:30 invalid csrf token
Dec 20 18:16:59 2020-12-20T17:16:59.479Z [4567/289] - error: /api/v3/topics/6145
Dec 20 18:16:59 invalid csrf token
Dec 20 18:17:44 2020-12-20T17:17:44.066Z [4567/289] - error: /api/post/upload
Dec 20 18:17:44 invalid csrf token
Dec 20 18:59:22 2020-12-20T17:59:22.577Z [4567/289] - error: /api/admin/plugins/emoji/upload
Dec 20 18:59:22 invalid csrf token
Dec 20 18:59:43 2020-12-20T17:59:43.815Z [4567/289] - error: /api/admin/plugins/emoji/upload
Dec 20 18:59:43 invalid csrf token
Dec 20 19:05:31 2020-12-20T18:05:31.578Z [4567/289] - error: /api/v3/topics/5992
Dec 20 19:05:31 invalid csrf token
Dec 20 19:05:38 2020-12-20T18:05:38.217Z [4567/289] - error: /api/v3/topics/5992
Dec 20 19:05:38 invalid csrf token
Dec 21 03:04:36 2020-12-21T02:04:36.516Z [4567/289] - error: /api/v3/topics/6158
Dec 21 03:04:36 invalid csrf token
Dec 21 03:04:42 2020-12-21T02:04:42.412Z [4567/289] - error: /api/v3/topics/6158
Dec 21 03:04:42 invalid csrf token
Dec 21 05:49:03 2020-12-21T04:49:03.076Z [4567/289] - error: /api/v3/topics/6156
Dec 21 05:49:03 invalid csrf token
Dec 21 05:49:10 2020-12-21T04:49:10.121Z [4567/289] - error: /api/v3/topics/6156
Dec 21 05:49:10 invalid csrf token
Dec 21 05:49:20 2020-12-21T04:49:20.394Z [4567/289] - error: /api/v3/topics/6156
Dec 21 05:49:20 invalid csrf token
Dec 21 05:49:27 2020-12-21T04:49:27.311Z [4567/289] - error: /api/v3/topics/6156
Dec 21 05:49:27 invalid csrf token
Dec 21 05:49:48 2020-12-21T04:49:48.165Z [4567/289] - error: /api/v3/topics/6156
Dec 21 05:49:48 invalid csrf token
Dec 21 05:50:25 2020-12-21T04:50:25.112Z [4567/289] - error: /api/v3/topics/6156
Dec 21 05:50:25 invalid csrf token
Dec 21 05:50:37 2020-12-21T04:50:37.199Z [4567/289] - error: /api/v3/topics/6156
Dec 21 05:50:37 invalid csrf token
Dec 21 05:51:02 2020-12-21T04:51:02.465Z [4567/289] - error: /api/v3/topics/6156
Dec 21 05:51:02 invalid csrf token
Dec 21 05:51:45 2020-12-21T04:51:45.248Z [4567/289] - error: /api/v3/topics/6156
Dec 21 05:51:45 invalid csrf token
Dec 21 05:52:08 2020-12-21T04:52:08.632Z [4567/289] - error: /api/v3/topics/6156
Dec 21 05:52:08 invalid csrf token
Dec 21 05:53:13 2020-12-21T04:53:13.762Z [4567/289] - error: /api/v3/topics/6156
Dec 21 05:53:13 invalid csrf token
Dec 21 05:54:04 2020-12-21T04:54:04.425Z [4567/289] - error: /api/v3/topics/6156
Dec 21 05:54:04 invalid csrf token
Dec 21 05:56:03 2020-12-21T04:56:03.381Z [4567/289] - error: /api/v3/topics/6156
Dec 21 05:56:03 invalid csrf token
Dec 21 13:44:14 2020-12-21T12:44:14.554Z [4567/289] - error: /api/v3/topics/6156
Dec 21 13:44:14 invalid csrf token
Dec 21 15:33:57 2020-12-21T14:33:57.246Z [4567/289] - error: /api/v3/topics/5992
Dec 21 15:33:57 invalid csrf token
Dec 21 16:55:51 2020-12-21T15:55:51.266Z [4567/289] - error: /api/v3/topics/6161
Dec 21 16:55:51 invalid csrf token
Dec 21 16:55:53 2020-12-21T15:55:53.769Z [4567/289] - error: /api/v3/topics/6161
Dec 21 16:55:53 invalid csrf token
Dec 21 18:47:45 2020-12-21T17:47:45.229Z [4567/289] - error: /api/v3/topics/6162
Dec 21 18:47:45 invalid csrf token
Dec 21 19:34:08 2020-12-21T18:34:08.176Z [4567/289] - error: /api/v3/topics/6169
Dec 21 19:34:08 invalid csrf token
Dec 21 19:34:29 2020-12-21T18:34:29.810Z [4567/289] - error: /api/v3/topics/6169
Dec 21 19:34:29 invalid csrf token
Dec 21 23:15:13 2020-12-21T22:15:13.118Z [4567/289] - error: /api/v3/topics/6181
Dec 21 23:15:13 invalid csrf token
Dec 22 03:10:16 2020-12-22T02:10:16.072Z [4567/289] - error: /api/v3/topics/6168
Dec 22 03:10:16 invalid csrf token
Dec 22 03:52:01 2020-12-22T02:52:01.077Z [4567/289] - error: /api/v3/topics/6162
Dec 22 03:52:01 invalid csrf token
Dec 22 16:30:44 2020-12-22T15:30:44.580Z [4567/289] - error: /api/v3/topics/6194
Dec 22 16:30:44 invalid csrf token
Dec 22 16:30:49 2020-12-22T15:30:49.395Z [4567/289] - error: /api/v3/topics/6194
Dec 22 16:30:49 invalid csrf token
Dec 22 18:07:09 2020-12-22T17:07:09.790Z [4567/289] - error: /api/v3/topics/6185
Dec 22 18:07:09 invalid csrf token
Dec 22 19:42:18 2020-12-22T18:42:18.963Z [4567/289] - error: /api/v3/topics/6185
Dec 22 19:42:18 invalid csrf token
Dec 22 20:46:02 2020-12-22T19:46:02.965Z [4567/289] - error: /api/v3/topics/6162
Dec 22 20:46:02 invalid csrf token
Dec 22 20:49:32 2020-12-22T19:49:32.407Z [4567/289] - error: /api/v3/topics
Dec 22 20:49:32 invalid csrf token
Dec 22 20:49:45 2020-12-22T19:49:45.332Z [4567/289] - error: /api/v3/topics
Dec 22 20:49:45 invalid csrf token
Dec 22 20:50:31 2020-12-22T19:50:31.619Z [4567/289] - error: /api/v3/topics
Dec 22 20:50:31 invalid csrf token
Dec 22 22:17:15 2020-12-22T21:17:15.366Z [4567/289] - error: /api/v3/topics/6203
Dec 22 22:17:15 invalid csrf token
Dec 23 03:01:36 2020-12-23T02:01:36.565Z [4567/289] - error: /api/compose
Dec 23 13:40:06 2020-12-23T12:40:06.399Z [4567/289] - error: /api/v3/topics/6202
Dec 23 13:40:06 invalid csrf token
Dec 23 13:40:12 2020-12-23T12:40:12.948Z [4567/289] - error: /api/v3/topics/6202
Dec 23 13:40:12 invalid csrf token
Dec 23 13:40:33 2020-12-23T12:40:33.736Z [4567/289] - error: /api/v3/topics/6202
Dec 23 13:40:33 invalid csrf token
Dec 23 15:40:14 2020-12-23T14:40:14.852Z [4567/289] - error: /api/v3/topics/6186
Dec 23 15:40:14 invalid csrf token
Dec 23 15:41:58 2020-12-23T14:41:58.990Z [4567/289] - error: /api/v3/topics/6186
Dec 23 15:41:58 invalid csrf token
Dec 23 15:42:03 2020-12-23T14:42:03.144Z [4567/289] - error: /api/v3/topics/6186
Dec 23 15:42:03 invalid csrf token
Dec 23 15:42:25 2020-12-23T14:42:25.363Z [4567/289] - error: /api/v3/topics/6186
Dec 23 15:42:25 invalid csrf token
Dec 23 15:42:44 2020-12-23T14:42:44.810Z [4567/289] - error: /api/v3/topics/6186
Dec 23 15:42:44 invalid csrf token

CSRF tokens are a mechanism to prevent certain types of "cross-site request forgery" attacks, but my preliminary search for a fix did not yield anything useful. I'll investigate this more. Maybe @mark or @Axtremus have any experience with this kind of web tec?

[George K]

@klaus having fun, are we?

[Klaus]

@jon-nyc said in Forum Issues:

Cool.

...and a few minutes ago they've fixed the bug. It's nice to use software with such an active community. We'll still have to wait for the next release, though.

[George K]

@klaus though different from what we've been used to, it's become head and shoulders better than Tapatalk and even Zetaboards.

Again, thanks for all your hard work, even if you seem to be enjoying yourself.

[Klaus]

@jon-nyc said in Forum Issues:

I've gotten the naked 'error' message too since the upgrade.

I don't remember what sequence led to it. In each case (maybe there were two) I refreshed the page and tried again and it worked.

@Larry for the time being - until the bug is fixed - refreshing the page (via the browser's "reload" button) might be a quicker way to work around the issue than rebooting your tablet.

[Copper]

@george-k said in Forum Issues:

@klaus having fun, are we?

Try using a valid csrf token

[Klaus]

I've deactivated the extended markdown plugin. The reason I installed it originally was to enable spoilers; the rest of the features was, as far as I can see, never used by anyone. We now have a better spoiler plugin and the editor for posts now looks less cluttered. Let me know if you miss that plugin.

[Klaus]

Nothing but "error".

@george-k and everyone else who has this error occasionally:

I reported this behavior to the NodeBB developers and got this reply.

it is exceeding difficult to debug because it just doesn't reproduce for the majority of users.

You're the first I've heard reporting this issue, so I'd need to know what's special about your users, how many are affected, etc.

Perhaps it is related to long-lived browser windows... if in a different tab they've logged out and back in, then the CSRF token is indeed expired. That would cause the error you see.

If this "Error" stuff shows up again, you could help by trying to identify the exact circumstances under which it happens. That would be an important step towards making the problem reproducible, which means that it becomes fixeable.

[George K]

@klaus said in Forum Issues:

If this "Error" stuff shows up again, you could help by trying to identify the exact circumstances under which it happens.

Will do. Hasn't happened in a while.

[mark]

Darkly mode (any dark background theme actually) has a fucked up search result font color. Can't even see it.

[Rainman]

@mark said in Forum Issues:

Darkly mode (any dark background theme actually) has a fucked up search result font color. Can't even see it.

Mark, I'd be glad to help.
What are you looking for?

[jon-nyc]

@rainman lol

[Klaus]

Hm, I tried "Darkly" and the fonts loook OK.

Maybe an issue with the particular browser you are using?

[mark]

@klaus Nothing to do with the browser. Happens with any browser on Mac or PC.

Your screenshot is not what i'm talking about. That's why I included a screen shot.

Click the magnifying glass icon in the upper right section of the page.

As you type, the "look ahead search" produces a list of results. The look ahead search result list font color is what i'm talking about.

[Klaus]

Oh, now I see. I can reproduce the problem.

Luckily, you are an administrator of this forum, and you have IT skills, hence I hereby happily shift the burden of investigating the issue to you

[Aqua Letifer]

Bad UX form to use ultra thin fonts in header material.

Just sayin', because I'm a dick and Klaus knows this. But he could use Comic Sans and it'd be okay. Thanks for all you're doing, it's crazy how many features you were able to add while keeping it bot-free.

[jodi]

I’m having a hard time reading everything here compared to yesterday, has something changed? Everything seems smaller. (On my iPad - maybe it’s just me, and I need to put on my other glasses. But it looks different. )

[mark]

@jodi said in Forum Issues:

I’m having a hard time reading everything here compared to yesterday, has something changed? Everything seems smaller. (On my iPad - maybe it’s just me, and I need to put on my other glasses. But it looks different. )

Jodi,

Post a screen shot. That might be my fault. I inadvertently clicked on the darkly skin in admin control and forgot to look at what it was set at before I did that. So I just picked the first one on the admin screen.

Klaus, does selecting a skin on the admin panel set the default skin? I was not aware of that. I thought I could inspect and or modify the attributes of the skin. My bad.

[Copper]

Yes, a new font is used on the General Discussion
directory page, it is less bold (skinnier lines) and darker color that blends with the background - needs more contrast between letters and the background and bolder font

It is hard too tell the difference between read and unread threads because the colors are similar and dark

[Klaus]

@mark said in Forum Issues:

Klaus, does selecting a skin on the admin panel set the default skin? I was not aware of that. I thought I could inspect and or modify the attributes of the skin. My bad.

I don't know, but I also noticed that the forum looks different now. Maybe you can revert what you did?