Django CSFR Error about deep-license-plate-recognition HOT 8 CLOSED

Setting same-origin in bunkerized nginx via the environment variable REFERRER_POLICY worked

Doc:
https://bunkerized-nginx.readthedocs.io/en/v1.3.2/environment_variables.html#security-headers

Thanks for your help and fast responses. 👍🏻

from deep-license-plate-recognition.

@MrCybertux is this a new installation? or did you already use it normally?

we are checking the situation to simulate the problem based on your information

from deep-license-plate-recognition.

@MrCybertux is this a new installation? or did you already use it normally?

we are checking the situation to simulate the problem based on your information

It is new we finalized the setup today

from deep-license-plate-recognition.

To debug this further, try setting the following in your nginx config: proxy_set_header Origin "";

from deep-license-plate-recognition.

A few questions:

1. Which browser are you using?
2. You are running into this issue when trying to log in (making a POST request). What happens when you simply load the login page? Does the page load over HTTP or HTTPS?
3. Are you changing origin and referrer headers via nginx?

from deep-license-plate-recognition.

A few questions:

1. Which browser are you using?
2. You are running into this issue when trying to log in (making a POST request). What happens when you simply load the login page? Does the page load over HTTP or HTTPS?
3. Are you changing origin and referrer headers via nginx?

1. The tests were made with Brave and Firefox on Linux and Chrome and Firefox on Windows.
2. Yes it only happens on Login before that the Page Loads normally
3. We are Using the Bunkerized Nginx Project it removes headers when sending responses to clients:
   Server, X-Powered-By, X-AspNet-Version, X-AspNetMvc-Version

The REFERRER_POLICY was set to no-referrer
I will try same-origin and report back the result

Do X-Content-Type-Options matter?

from deep-license-plate-recognition.

no-referrer will definitely cause this issue. There could be other reasons too but let's start by replacing no-referrer. X-Content-Type-Options does not matter.

from deep-license-plate-recognition.

@MrCybertux I was able to reproduce your problem and configure it to work properly, you need to add the X-Forwarded-Proto header to the configuration file in Nginx.

I am trying with pure Nginx, in my case it was only necessary to add the proxy_set_header X-Forwarded-Proto $scheme to the configuration file.

Please test and tell us if it worked correctly

from deep-license-plate-recognition.