Creating a page in Firefox causes the create dialog to wait indefinitely
プラットフォームについて: Server および Data Center のみ。この記事は、Server および Data Center プラットフォームのアトラシアン製品にのみ適用されます。
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Fisheye および Crucible は除く
問題
When using Mozilla Firefox to create a new page in Confluence, the waiting icon displays and the blueprints do not display. This does not occur in Google Chrome.
atlassian-confluence.log に次のメッセージが出力される。
2015-11-17 12:06:36,537 WARN [http-nio-8090-exec-6] [common.security.jersey.XsrfResourceFilter] passesAdditionalBrowserChecks Additional XSRF checks failed for request: http://confluence.mycompany.com/rest/analytics/1.0/publish/bulk , origin: null , referrer: null , credentials in request: true , allowed via CORS: false診断
環境
- Confluence 5.8.13 or above
- Mozilla Firefox browser
Confluence has custom HTML in the
<head>section (orcontent="never")<meta name="referrer" content="none">
原因
Firefox is not sending the Referrer: header when the Create button is clicked.
In versions of Confluence before 5.8.13, the Create button was rendered as a HTML <a> tag.
<a id="create-page-button" class="aui-button aui-style aui-button-primary aui-nav-imagelink" title="Create Content (c)" href="/pages/createpage.action?spaceKey=DGN&fromPageId=4292610">
<span>Create</span>
</a>From Confluence 5.8.13 this was changed to a JQuery activation
<a id="create-page-button" href="#" class="aui-button aui-style aui-button-primary aui-nav-imagelink" title="Create Content (c)">
<span>Create</span>
</a>Firefox added a feature based on a W3 specification where pages can include a HTML meta tag that will stop the browser sending the Referer: header. This is added in Confluence in Confluence Admin > General Configuration > Custom HTML.
Firefox without the Referer header
Firefox with the Referer header
In Confluence, if there is no Referer: header then the XSRF checks will throw an error and content will not render.
ソリューション
You will need to remove the HTML meta tag.
- Go to Confluence Admin > General Configuration > Custom HTML
- Click Edit
- Remove the offending
<meta name="referrer" content="none"> - Click Save
If this does not resolve your problem, please review Cross Site Request Forgery (CSRF) protection changes in Atlassian REST for more information.