[PKG-Openstack-devel] Bug#862387: openstack-dashboard: instance delete fails with: 403 Forbidden - CSRF verification failed. Request aborted.

[Thomas Goirand]

On 05/15/2017 11:44 AM, Valentin Vidic wrote:
> On Fri, May 12, 2017 at 09:00:00AM +0200, Valentin Vidic wrote:
>> Instance delete fails when I access:
>>
>>   http://os-ctrl/horizon/project/instances/
>>
>> and select "Delete Instance" from the list of actions with
>> the error:
>>
>>   Forbidden (403)
>>   CSRF verification failed. Request aborted.
>>
>>   Help
>>   Reason given for failure:
>>     CSRF token missing or incorrect.
> 
> Downgrading python-django to 1.8.16-1~bpo8+1 seems to help,
> so it seems this version of horizon is not compatible with
> django 1.10 somehow?

Hi,

FYI, I worked together with upstream during all of last summer to
somehow gain Django 1.10 compatibility. There was loads of issues, which
were fixed one by one. I guess this bug means we didn't fixed them all.

If you're good enough with Django, we'd be very happy to add the patch
both upstream and in the Debian package. According to one of the
upstream "leaders" on IRC:

<robcresswell> zigo: Its on the batchActions and deleteActions
<robcresswell> inside tables
<robcresswell> so obviously, very severe.
<robcresswell> What I dont understand is why this didnt break before

Cheers,

Thomas Goirand (zigo)