605536 - Traceback: ValidationError: [u'ManagementForm data is missing or has been tampered with']

Status: RESOLVED DUPLICATE of bug 605533

(addons.mozilla.org Graveyard :: Developer Pages, defect, P5)

Description

[Stephen Donner [:stephend] Not actively reading bugmail]

On https://preview.addons.mozilla.org/z/en-US/developers/addon/8585/ownership, doing:

POST:<QueryDict: {u'eula': [u'URL'], u'form-0-user': [u'[e-mail]'], u'text': [u''], u'form-2-user': [u"Enter a new author's email address"], u'form-1-position': [u'1'], u'form-0-id': [u'20088'], u'form-1-user': [u'[e-mail]'], u'form-2-listed': [u'on'], u'form-2-role': [u'5'], u'has_eula': [u'on'], u'form-1-id': [u'20089'], u'csrfmiddlewaretoken': [u'47f11c8614fb9ce8cf200d72860f7f7c'], u'form-1-role': [u'5'], u'privacy_policy': [u''], u'form-2-position': [u'0'], u'form-TOTAL_FORMS': [u'1102807822484>'], u'form-INITIAL_FORMS': [u'2'], u'form-0-listed': [u'on'], u'name': [u'Custom License'], u'form-MAX_NUM_FORMS': [u''], u'form-0-position': [u'0'], u'form-0-role': [u'5'], u'form-1-listed': [u'on']}>,

results in:

Traceback (most recent call last):

  File "/data/amo_python/www/preview/zamboni/vendor/src/django/django/core/handlers/base.py", line 100, in get_response
    response = callback(request, *callback_args, **callback_kwargs)

  File "/data/amo_python/www/preview/zamboni/apps/amo/decorators.py", line 77, in wrapper
    return f(*args, **kw)

  File "/data/amo_python/www/preview/zamboni/apps/amo/decorators.py", line 69, in wrapper
    return f(*args, **kw)

  File "/data/amo_python/www/preview/zamboni/apps/amo/decorators.py", line 24, in wrapper
    return func(request, *args, **kw)

  File "/data/amo_python/www/preview/zamboni/apps/devhub/views.py", line 39, in wrapper
    return f(request, addon_id, addon, *args, **kw)

  File "/data/amo_python/www/preview/zamboni/apps/devhub/views.py", line 54, in wrapper
    return f(request, addon_id, addon, *args, **kw)

  File "/data/amo_python/www/preview/zamboni/apps/devhub/views.py", line 111, in ownership
    user_form = AuthorFormSet(request.POST or None, queryset=qs)

  File "/data/amo_python/www/preview/zamboni/vendor/src/django/django/forms/models.py", line 423, in __init__
    super(BaseModelFormSet, self).__init__(**defaults)

  File "/data/amo_python/www/preview/zamboni/vendor/src/django/django/forms/formsets.py", line 47, in __init__
    self._construct_forms()

  File "/data/amo_python/www/preview/zamboni/vendor/src/django/django/forms/formsets.py", line 96, in _construct_forms
    for i in xrange(self.total_form_count()):

  File "/data/amo_python/www/preview/zamboni/vendor/src/django/django/forms/formsets.py", line 70, in total_form_count
    return self.management_form.cleaned_data[TOTAL_FORM_COUNT]

  File "/data/amo_python/www/preview/zamboni/vendor/src/django/django/forms/formsets.py", line 57, in _management_form
    raise ValidationError('ManagementForm data is missing or has been tampered with')

ValidationError: [u'ManagementForm data is missing or has been tampered with']

Comment 1

[Jeff Balogh (:jbalogh)]

Were you tampering?

Comment 2

[Stephen Donner [:stephend] Not actively reading bugmail]

(In reply to comment #1)
> Were you tampering?

Indeed; was running XSS Me (https://addons.mozilla.org/en-US/firefox/addon/7598/) with the "Test all forms with top attacks" setting; not sure which one, exactly, triggered this.

Comment 3

[Vincent Agnano [:vinyll]]

Can't reproduce it even with XSS Me addon.
Might be in relation with https://bugzilla.mozilla.org/show_bug.cgi?id=605533