Traceback: ValidationError: [u'ManagementForm data is missing or has been tampered with']

RESOLVED DUPLICATE of bug 605533

Status

P5
minor
RESOLVED DUPLICATE of bug 605533
8 years ago
3 years ago

People

(Reporter: stephend, Unassigned)

Tracking

unspecified
4.x (triaged)

Details

(Whiteboard: [contribute], URL)

On https://preview.addons.mozilla.org/z/en-US/developers/addon/8585/ownership, doing:

POST:<QueryDict: {u'eula': [u'URL'], u'form-0-user': [u'stephen.donner@gmail.com'], u'text': [u''], u'form-2-user': [u"Enter a new author's email address"], u'form-1-position': [u'1'], u'form-0-id': [u'20088'], u'form-1-user': [u'krupa.raj82@gmail.com'], u'form-2-listed': [u'on'], u'form-2-role': [u'5'], u'has_eula': [u'on'], u'form-1-id': [u'20089'], u'csrfmiddlewaretoken': [u'47f11c8614fb9ce8cf200d72860f7f7c'], u'form-1-role': [u'5'], u'privacy_policy': [u''], u'form-2-position': [u'0'], u'form-TOTAL_FORMS': [u'1102807822484>'], u'form-INITIAL_FORMS': [u'2'], u'form-0-listed': [u'on'], u'name': [u'Custom License'], u'form-MAX_NUM_FORMS': [u''], u'form-0-position': [u'0'], u'form-0-role': [u'5'], u'form-1-listed': [u'on']}>,

results in:

Traceback (most recent call last):

  File "/data/amo_python/www/preview/zamboni/vendor/src/django/django/core/handlers/base.py", line 100, in get_response
    response = callback(request, *callback_args, **callback_kwargs)

  File "/data/amo_python/www/preview/zamboni/apps/amo/decorators.py", line 77, in wrapper
    return f(*args, **kw)

  File "/data/amo_python/www/preview/zamboni/apps/amo/decorators.py", line 69, in wrapper
    return f(*args, **kw)

  File "/data/amo_python/www/preview/zamboni/apps/amo/decorators.py", line 24, in wrapper
    return func(request, *args, **kw)

  File "/data/amo_python/www/preview/zamboni/apps/devhub/views.py", line 39, in wrapper
    return f(request, addon_id, addon, *args, **kw)

  File "/data/amo_python/www/preview/zamboni/apps/devhub/views.py", line 54, in wrapper
    return f(request, addon_id, addon, *args, **kw)

  File "/data/amo_python/www/preview/zamboni/apps/devhub/views.py", line 111, in ownership
    user_form = AuthorFormSet(request.POST or None, queryset=qs)

  File "/data/amo_python/www/preview/zamboni/vendor/src/django/django/forms/models.py", line 423, in __init__
    super(BaseModelFormSet, self).__init__(**defaults)

  File "/data/amo_python/www/preview/zamboni/vendor/src/django/django/forms/formsets.py", line 47, in __init__
    self._construct_forms()

  File "/data/amo_python/www/preview/zamboni/vendor/src/django/django/forms/formsets.py", line 96, in _construct_forms
    for i in xrange(self.total_form_count()):

  File "/data/amo_python/www/preview/zamboni/vendor/src/django/django/forms/formsets.py", line 70, in total_form_count
    return self.management_form.cleaned_data[TOTAL_FORM_COUNT]

  File "/data/amo_python/www/preview/zamboni/vendor/src/django/django/forms/formsets.py", line 57, in _management_form
    raise ValidationError('ManagementForm data is missing or has been tampered with')

ValidationError: [u'ManagementForm data is missing or has been tampered with']
Were you tampering?
(In reply to comment #1)
> Were you tampering?

Indeed; was running XSS Me (https://addons.mozilla.org/en-US/firefox/addon/7598/) with the "Test all forms with top attacks" setting; not sure which one, exactly, triggered this.

Updated

8 years ago
Severity: normal → minor
Priority: -- → P5
Whiteboard: [fuzz]

Updated

8 years ago
Assignee: nobody → amckay
Target Milestone: 5.12.2 → 4.x (triaged)

Updated

8 years ago
Assignee: amckay → nobody
Whiteboard: [fuzz] → [fuzz][formsets]
Whiteboard: [fuzz][formsets] → [contribute]
Can't reproduce it even with XSS Me addon.
Might be in relation with https://bugzilla.mozilla.org/show_bug.cgi?id=605533
Status: NEW → RESOLVED
Last Resolved: 5 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 605533
(Assignee)

Updated

3 years ago
Product: addons.mozilla.org → addons.mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.