"No referer header" error for bug comments is unhelpful and ugly

[Kiri]

Selecting "Post Comment" results in a "system error" with an error window poorly showing an error message.
Due to this bug, AFAIK, I will not be able to add further information to this, or any other, bug report.
Only the text of the error message follows:

The following errors were encountered:

    * Error: Launchpad system error fieldset.collapsed div, fieldset div.collapsed {display: none;} fieldset.collapsible div, fieldset div.collapsed {display: block;} var cookie_scope = '; Path=/; Secure; Domain=.launchpad.net'; // Define a global YUI sandbox that should be used by everyone. var LPS = YUI(); LPS.use('node', 'lp', function(Y) { Y.on('load', function(e) { sortables_init(); initInlineHelp(); Y.lp.activate_collapsibles(); activateFoldables(); activateConstrainBugExpiration(); }, window); // Hook up the function that dismisses the help window if we click // anywhere outside of it. Y.on('click', handleClickOnPage, window); }); var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-12833497-1']); _gaq.push(['_setDomainName', '.launchpad.net']); _gaq.push(['_trackPageview']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; (document.getElementsByTagName('head')[0] || document.getElementsByTagName('body')[0]).appendChild(ga); })(); Kiri • No REFERER Header Launchpad requires a REFERER header to perform this action. There is no REFERER header present. This can be caused by configuring your browser to block REFERER headers. Unblock REFERER headers for launchpad.net and try again, or see the FAQ Why does Launchpad require a REFERER header? for more information. You can also join the #launchpad IRC support channel on irc.freenode.net for further assistance. • Take the tour • Read the guide © 2004-2010 Canonical Ltd. • Terms of use • Contact us • System status LP.client.links['me'] = '/~kiri';

[Graham Binns (gmb)]

Okay, so first up, the formatting of the message sucks.

It looks like this error is occurring because the client is not sending a REFERRER header (Launchpad blocks POST requests without a REFERRER in order to close down an XSS vector).

I'd suggest trying to add a comment using a different browser to see if you can reproduce the problem. In the meantime, this bug report should specifically be about making the error message more helpful, so I'll update it to reflect that.

[dtfjgk (dtfjgk-deactivatedaccount)]

I use an Firefox addon called "Modify Headers" to hide my referrer. This bug makes me very sad. Everytime I wanna join to other affected people I have to change the referrer manually. Please fix it!

[Deryck Hodge (deryck)]

Since this bug is mostly about the bad error, I'm dupe'ing this bug against bug 521447.

[BavarianPH (bavarianph)]

how does one report the (referer) referrer header problem,

when the referrer header is needed to report an error or bug?

one is unable to change the referrer header

to the appropriate setting, because the next web-page

changes it right back to 0

[BavarianPH (bavarianph)]

one has to disagree that this is a duplicate of bug #521447.

this is specifically about the referrer header problem

when trying to communicate with launchpad.

Since launchpad requires the referrer header,

launchpad should resolve the problem in how

to send the referrer header.

Firefox's about:config settings seem no longer

save-able in Firefox 4.0.

"Change Referrer Button" Firefox 4.0 add-on,

has been the only applet that seems to work

temporarily. -

Not showing ones referrer header to other sites

is a matter of security .