AntiCSRF Discussions Rss Feed

New Post: Re: Getting error : No CSRF cookie supplied and CSRF form field is missing.

sadranyi — Mon, 15 Apr 2013 20:26:30 GMT

I think i figured it out. if you are testing with cassini which is the integrated web server in Visual studio you will keep getting this error.
however if you deploy the application on a web server IIS it should work just fine, as the cookies are generated from the IIS sever.

I hope this helps someone :)

New Post: Re: Getting error : No CSRF cookie supplied and CSRF form field is missing.

sadranyi — Fri, 12 Apr 2013 20:04:37 GMT

am running .NET 4.0 and am having the same error any fix or workaround

New Post: Re: Getting error : No CSRF cookie supplied and CSRF form field is missing.

VinayShah — Thu, 01 Nov 2012 08:13:12 GMT

Hi,

I am getting following error after adding anticsrf dll and necessery code in web.config file.

Server Error in '/Code' Application.

No CSRF cookie supplied and CSRF form field is missing.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: Idunno.AntiCsrf.PotentialCsrfException: No CSRF cookie supplied and CSRF form field is missing.

Source Error:


Line 283:            {
Line 284:                // Whilst this does lose the stack, that's not really a bad thing here as the exception message is detailed enough.
Line 285:                throw ex;
Line 286:            }
Line 287:        }

Source File: C:\Users\vin\Desktop\anticsrf-69709\Trunk\idunno.AntiCSRF\AntiCsrfModule.cs Line: 285

Stack Trace:


[PotentialCsrfException: No CSRF cookie supplied and CSRF form field is missing.]
   Idunno.AntiCsrf.AntiCsrfModule.RaiseError(Exception ex, HttpContext context) in C:\Users\vin\Desktop\anticsrf-69709\Trunk\idunno.AntiCSRF\AntiCsrfModule.cs:285
   Idunno.AntiCsrf.AntiCsrfModule.PreRequestHandlerExecute(Object source, EventArgs eventArgs) in C:\Users\vin\Desktop\anticsrf-69709\Trunk\idunno.AntiCSRF\AntiCsrfModule.cs:140
   System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +216
   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +120

Version Information: Microsoft .NET Framework Version:2.0.50727.4952; ASP.NET Version:2.0.50727.4955

Pls help.

Thanks,

Vinay

New Post: JSON

f209 — Tue, 24 Jul 2012 03:13:50 GMT

Hi, I'm wondering if this AntiCSRF module protects JSON web methods. I realize CORS would prevent json requests to some degree, but you can make a json request with a content type of application/x-www-form-urlencoded, how would I protect from such a request without utilizing MVC.

New Post: AntiCSRF for .NET 1.1

wayhang — Tue, 15 Nov 2011 03:25:52 GMT

Hi,

The AntiCSRF 0.9.1 Beta is for .NET 2.0?

How about .NET 1.1?

Thanks!

New Post: Please help me figure out why I'm getting "Could not find any resources appropriate .." err

cgchavero — Sat, 06 Feb 2010 00:14:11 GMT

I have this issue and I try setting culture features in my project, but i can't do it, because mi c# programming skill is very basic.

So I download the source AntiCSRF-35092.zip and recompile Releases\0.9.1 Beta source.

Later I remove the original DLL Idunno.AntiCsrf.dll from my project and copy the new DLL resulted from recompilated source with this lines removed from assemblyinfo.cs:

[assembly: AssemblyCulture("")]
[assembly: NeutralResourcesLanguageAttribute("en")]

The aplication works fine!!! My web.config just redirect to html page in csrf attack detected, so I will try the detectionResult="RaiseException" feature for logging this atacks.

I hope this info result useful for somebody.

See you!

New Post: Please help me figure out why I'm getting "Could not find any resources appropriate .." err

blowdart — Wed, 16 Dec 2009 23:44:59 GMT

You're not the first person to see this, and I can't reproduce it myself.

Could you download the source and in the assemblyinfo.cs file remove the following two lines and let me know if that solves it?

[assembly: AssemblyCulture("")]
[assembly: NeutralResourcesLanguageAttribute("en")]

New Post: Error with POSTing to page different from GET page

redpatch — Wed, 16 Dec 2009 20:22:26 GMT

I get the following error when the aspx page that receives the POST is different from the aspx page that reponds to the GET:

Could not find any resources appropriate for the specified culture or the neutral culture. Make sure "Idunno.AntiCsrf.Properties.Resources.resources" was correctly embedded or linked into assembly "Idunno.AntiCSRF" at compile time, or that all the satellite assemblies required are loadable and fully signed.

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Resources.MissingManifestResourceException: Could not find any resources appropriate for the specified culture or the neutral culture. Make sure "Idunno.AntiCsrf.Properties.Resources.resources" was correctly embedded or linked into assembly "Idunno.AntiCSRF" at compile time, or that all the satellite assemblies required are loadable and fully signed.

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:


[MissingManifestResourceException: Could not find any resources appropriate for the specified culture or the neutral culture.  Make sure "Idunno.AntiCsrf.Properties.Resources.resources" was correctly embedded or linked into assembly "Idunno.AntiCSRF" at compile time, or that all the satellite assemblies required are loadable and fully signed.]
   System.Resources.ResourceManager.InternalGetResourceSet(CultureInfo culture, Boolean createIfNotExists, Boolean tryParents) +7676578
   System.Resources.ResourceManager.InternalGetResourceSet(CultureInfo culture, Boolean createIfNotExists, Boolean tryParents) +583
   System.Resources.ResourceManager.InternalGetResourceSet(CultureInfo culture, Boolean createIfNotExists, Boolean tryParents) +583
   System.Resources.ResourceManager.GetString(String name, CultureInfo culture) +74
   Idunno.AntiCsrf.Properties.Resources.get_exceptionMessageFormFieldMissing() +27
   Idunno.AntiCsrf.AntiCsrfModule.PreRequestHandlerExecute(Object source, EventArgs eventArgs) +640
   System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +68
   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +75

Version Information: Microsoft .NET Framework Version:2.0.50727.3603; ASP.NET Version:2.0.50727.3053

New Post: Support Team Autoresponse

webcom — Mon, 17 Aug 2009 11:56:36 GMT

Thank you for your email.

If you require our urgent attention, please call us at any of the numbers listed below:

+91 - 361 - 2667017 / 2668579 / 2668414

Fax: +91 - 361 -2660630

Alternate email : info@webcomindia.biz

This is an autogenerated response. Please do not reply to this email.

Support Team
Web.Com(India) Pvt. Ltd.

New Post: Support Team Autoresponse

webcom — Mon, 17 Aug 2009 11:56:26 GMT

New Post: Support Team Autoresponse

webcom — Mon, 17 Aug 2009 11:56:16 GMT

New Post: Support Team Autoresponse

webcom — Mon, 17 Aug 2009 11:55:57 GMT

New Post: Support Team Autoresponse

webcom — Mon, 17 Aug 2009 11:55:56 GMT

New Post: Support Team Autoresponse

webcom — Mon, 17 Aug 2009 11:55:36 GMT

New Post: Support Team Autoresponse

webcom — Mon, 17 Aug 2009 11:55:26 GMT

New Post: Support Team Autoresponse

webcom — Mon, 17 Aug 2009 11:55:16 GMT

New Post: Support Team Autoresponse

webcom — Mon, 17 Aug 2009 11:55:06 GMT

New Post: Support Team Autoresponse

webcom — Mon, 17 Aug 2009 11:54:57 GMT

New Post: Support Team Autoresponse

webcom — Mon, 17 Aug 2009 11:54:46 GMT

New Post: Support Team Autoresponse

webcom — Mon, 17 Aug 2009 11:54:36 GMT