Page MenuHomePhabricator

Regression: &action=unwatch is broken with JS off
Closed, DeclinedPublic


Session failure
There seems to be a problem with your login session; this action has been canceled as a precaution against session hijacking. Go back to the previous page, reload that page and then try again.

Happens when JS is disabled. Probably regression from the watch token api change.

Version: unspecified
Severity: major



Event Timeline

bzimport raised the priority of this task from to High.Nov 21 2014, 11:26 PM
bzimport set Reference to bz29847.
bzimport added a subscriber: Unknown Object (MLST).

The watch tab in Vector skin seems to work just fine with JS off. Are you explicitly doing a ?action=unwatch link manually, or is this a UI component elsewhere in the interface, or with a particular skin that might be behaving differently?

Works for me. But user mailer is sending unwatch links without a token.
Hopefully, the token last long enough to work well in emails.

No, tokens cannot be used from emails -- by definition they cannot since whatever's being sent is *not in your session*.

What links are getting this error?

Closing as WFM, can't repro on /trunk.