? ? Pending

User tests: Successful: Unsuccessful:

avatar joomdonation
joomdonation
4 Feb 2021

Pull Request for Issue #32272 .

Summary of Changes

The emailexport method of PrivacyControllerRequest controller check form token from GET ( see https://github.com/joomla/joomla-cms/blob/staging/administrator/components/com_privacy/controllers/request.php#L139 ), however, the form token is not passed in the URL and it causes the error below when the button is pressed:

The security token did not match. The request was aborted to prevent any security breach. Please try again

This simple PR just fixes that error.

Testing Instructions

  1. Code review.
  2. Real test: See comment #32299 (comment) below.

Actual result BEFORE applying this Pull Request

See issue #32272 : Error "The security token did not match. The request was aborted to prevent any security breach. Please try again"

Expected result AFTER applying this Pull Request

No error will be shown. The data is exported and emailed.

Documentation Changes Required

None.

avatar joomdonation joomdonation - open - 4 Feb 2021
avatar joomdonation joomdonation - change - 4 Feb 2021
Status New Pending
avatar joomla-cms-bot joomla-cms-bot - change - 4 Feb 2021
Category Administration
avatar joomdonation joomdonation - change - 4 Feb 2021
The description was changed
avatar joomdonation joomdonation - edited - 4 Feb 2021
avatar richard67
richard67 - comment - 4 Feb 2021

@joomdonation Could it be also tested with a real test, i.e. reproducing issue #32272 ? I would prefer that to a code review only.

avatar joomdonation
joomdonation - comment - 4 Feb 2021

@richard67 Yes. However, I don't have experience with Privacy Request, so I might give a wrong testing instructions:

  1. Create a menu item to link to Create Request menu item type of Privacy component
  2. Go to frontend of your site, access to that menu item, enter your email and submit a Export request. You should receive an email, please follow instructions in the email to confirm the request
  3. Now, go to backend of your site, access to Users -> Privacy, then Requests, you will see list of requests. Click on a confirmed request
  4. On the screen, you will see the request details. Press on Email Data Export button in the toolbar:
  • Before patch, you will receive the error "The security token did not match. The request was aborted to prevent any security breach. Please try again"
  • After patch, no error will be shown. The data is exported and emailed.
avatar richard67
richard67 - comment - 4 Feb 2021

Now, go to frontend of your site, access to Users -> Privacy, then Requests, you will see list of requests. Click on a confirmed request

@joomdonation Shouldn't that be "backend"? Beside that it looks ok to me, so after correction copy it to the testing instructions in the description, please.

And we have PHP a code style error: https://ci.joomla.org/joomla/joomla-cms/39856/1/3 . You know how to fix it? Let me know if not.

avatar joomdonation
joomdonation - comment - 4 Feb 2021

@richard67, yes, that should be backend. I corrected it. Could you please help with the Line exceeds CS? I don't know how to fix that one.

avatar richard67
richard67 - comment - 4 Feb 2021

@joomdonation You can just commit the above suggested change with the button on GitHub.

avatar joomdonation joomdonation - change - 4 Feb 2021
Labels Added: ?
avatar richard67 richard67 - change - 6 Feb 2021
The description was changed
avatar richard67 richard67 - edited - 6 Feb 2021
avatar richard67 richard67 - change - 6 Feb 2021
The description was changed
avatar richard67 richard67 - edited - 6 Feb 2021
avatar alikon alikon - test_item - 14 Feb 2021 - Tested successfully
avatar alikon
alikon - comment - 14 Feb 2021

I have tested this item successfully on 0110d08


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/32299.

avatar Quy Quy - test_item - 12 Mar 2021 - Tested successfully
avatar Quy
Quy - comment - 12 Mar 2021

I have tested this item successfully on 0110d08


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/32299.

avatar Quy Quy - change - 12 Mar 2021
Status Pending Ready to Commit
avatar Quy
Quy - comment - 12 Mar 2021

RTC


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/32299.

avatar rdeutz rdeutz - change - 15 Mar 2021
Status Ready to Commit Fixed in Code Base
Closed_Date 0000-00-00 00:00:00 2021-03-15 10:12:04
Closed_By rdeutz
Labels Added: ?
avatar rdeutz rdeutz - close - 15 Mar 2021
avatar rdeutz rdeutz - merge - 15 Mar 2021

Add a Comment

Login with GitHub to post a comment