616323 - Provide more helpful error message on CSRF errors

Status: VERIFIED FIXED

(Input :: General, enhancement, P3)

Description

[Fred Wenzel [:wenzel]]

Currently, CSRF protection errors lead to an ugly, not very helpful error message.

Since these are mostly caused by people messing with their cookie settings, we should probably provide a helpful error message, asking them to a) turn on cookies and b) disable any add-ons that keep them from accepting cookies.

Comment 1

[Fred Wenzel [:wenzel]]

I added a CSRF error page, shortly explaining the problem and pointing to SUMO.

http://github.com/fwenzel/reporter/commit/d9ad078

To reproduce, please open a feedback page, then using firebug, mangle or remove the hidden <input name="csrfmiddlewaretoken"...> field from the DOM before submitting it. Or mangle the CSRF token using TamperData or the like before sending it to the server.

Aakash, feel free to proofread the error page text and tell me if you want it changed.

Comment 2

[Rebecca Billings [:rbillings]]

Verified error and links display correctly