# character in token

Any critical bugs will be fixed within 24-48 hours.
Post Reply
antevasin
Posts: 125
Joined: 24 Mar 2020, 08:57
Name: Spencer Crocker
Location: Corby, UK
Company Name: Unicloud
Contact:

# character in token

Post by antevasin »

The # character is sometimes used in the new CSRF token feature of 2.9.
As # is a reserved it means that the query string get truncated if this character is present in the query string
i.e

Code: Select all

...&token=e23%k#jsk...
becomes

Code: Select all

...&token=e23%k
and you get a token_error

Not sure about other characters but it might be best to ensure that all special characters are excluded from the token string
https://developers.google.com/maps/docu ... l-encoding
User avatar
support
Site Admin
Posts: 6231
Joined: 19 Oct 2014, 18:22
Name: Sergey Kharchishin
Location: Russia, Evpatoriya

Re: # character in token

Post by support »

Strange, I can't reproduce it. In 2.9 token generated without special chars. Can you show me where is it?
antevasin
Posts: 125
Joined: 24 Mar 2020, 08:57
Name: Spencer Crocker
Location: Corby, UK
Company Name: Unicloud
Contact:

Re: # character in token

Post by antevasin »

OK. maybe I had an old token then...
All good if 2.9 token doesn't use special characters.
Post Reply