Cannot send form data in opera

[bastik]

Hi, I have problems with the launchpad website.
Lately I get "Unexpected form data: Launchpad doesn't understand the form data submitted in this request." when I try to download the translations. This message comes even on logout. Anyone around who knows what this is about?

I use the Opera browser (10.10). It used to work with launchpad website. When I tried to download the translations on 2010-03-14, i got

"Unexpected form data

Launchpad doesn't understand the form data submitted in this request."

The same error comes, when I try to log out, or try to send this bugreport (only after clicking "Submit Bug Report")

The same in Firefox works fine.

URL:https://launchpad.net/~launchp

[Данило Шеган (danilo)]

I've tried it out on our web site with Opera 10.00beta3 (build 4537) on a bunch of different URLs. I've also tried it with the latest Opera 10.10 and it still worked both for translation downloads and for logging out.

Can you please be more specific about where did you exactly try this? Can you also post a screenshot of the web page when you get it?

Please update the bug status to 'New' once you provide this information. Thanks!

[bastik (bstk)]

URL: https://launchpad.net/~bastikln/+logout

I'm on Ubuntu Karmic.

I go to https://launchpad.net/, log in - no problem.

Then go to some category e.g. translations, then click on the logout button in the upper right corner -> error

I could send some wireshark log, but you cannot see much because it's encrypted.

I'm not sure in what way my setup differs from yours, anything else I can check?

[Julian Wiedmann (jwiedmann)]

I don't think this is related to Opera - I recently experienced the same behaviour with Firefox. Fixed it by telling FF to send the normal HTTP referer (instead of blocking it, e.g. with the Refcontrol extension).

I'm pretty sure there's a similar config-option in Opera, give it a try ...

[William Grant (wgrant)]

You need to at least send the correct hostname in the Referer header. The error message should improve soon.

[bastik (bstk)]

It's true, it depends on the referrer settings.

No other site I normally use, has problems with this, why do you need referrer information so badly? Isn't it enough to have https connection?

[Francis J. Lacoste (flacoste)]

Well, the normal sites are vulnerable to CSFR attacks. (That's visiting a third party sites that will trigger a request on your behalf to the vulnerable site.)