error subscribing bug mail notifications

Asked by Quinta Helmer

When I try to subcribe to the mail notification of (at least) bug #848198 and 868380 I receive the following error message:
The following errors were encountered:

    Error: Launchpad system error var LP = { cache: {}, links: {} }; var cookie_scope = '; Path=/; Secure; Domain=.launchpad.net'; // Define a global YUI sandbox that should be used by everyone. var LPS = YUI({ // Don't try to fetch CSS files. fetchCSS: false, // For paranoia, set a low timeout to not wait on loading a resource. timeout: 50 }); LPS.use('base', 'node', 'oop', 'event', 'lp.bugs.bugtask_index', 'lp.bugs.subscribers', 'lp.code.branchmergeproposal.diff', 'lp.comments.hide', function(Y) { Y.on("domready", function () { if (Y.one(document.body).hasClass('private')) { Y.lp.app.privacy.setup_privacy_notification(); Y.lp.app.privacy.display_privacy_notification(); } }); }); LPS.use('node', 'event-delegate', 'lp', 'lp.app.links', 'lp.app.longpoll', function(Y) { Y.on('load', function(e) { sortables_init(); initInlineHelp(); Y.lp.activate_collapsibles(); activateFoldables(); activateConstrainBugExpiration(); Y.lp.app.links.check_valid_lp_links(); // Longpolling will only start if // LP.cache.longpoll is populated. // We use Y.later to work around a Safari/Chrome 'feature': // The mouse cursor stays 'busy' until all the requests started during // page load are finished. Hence we want the long poll request to start // right *after* the page has loaded. Y.later(0, Y.lp.app.longpoll, Y.lp.app.longpoll.setupLongPollManager); }, window); // Hook up the function that dismisses the help window if we click // anywhere outside of it. Y.on('click', handleClickOnPage, window); Y.on('lp:context:web_link:changed', function(e) { window.location = e.new_value; }); }); var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-12833497-1']); _gaq.push(['_setDomainName', '.launchpad.net']); _gaq.push(['_setAllowHash', false]); _gaq.push(['_trackPageview']); (function() { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; (document.getElementsByTagName('head')[0] || document.getElementsByTagName('body')[0]).appendChild(ga); })(); Quinta Helmer (qhelmer) • No REFERER Header Launchpad requires a REFERER header to perform this action. There is no REFERER header present. This can be caused by configuring your browser to block REFERER headers. Unblock REFERER headers for launchpad.net and try again, or see the FAQ Why does Launchpad require a REFERER header? for more information. You can also join the #launchpad IRC support channel on irc.freenode.net for further assistance. • Take the tour • Read the guide © 2004-2011 Canonical Ltd. • Terms of use • Contact Launchpad Support • Blog • System status • r14185 (Get the code!) LP.links['me'] = '/~qhelmer'; LP.cache = {};

I don't know whether or not it still subscribed me.

What should happen: confirmation that I am subscribed or at least a clearer error message (so that I know what went wrong and why I am not subscribed).

Question information

Language:
English Edit question
Status:
Solved
For:
Launchpad itself Edit question
Assignee:
No assignee Edit question
Solved by:
Quinta Helmer
Solved:
Last query:
Last reply:
Revision history for this message
Gavin Panella (allenap) said :
#1

This should definitely be presented better (bug #521447 I
believe). However, the error is legitimate:

> No REFERER Header
> Launchpad requires a REFERER header to perform this action. There is
> no REFERER header present. This can be caused by configuring your
> browser to block REFERER headers. Unblock REFERER headers for
> launchpad.net and try again.

Can you see if you have any blocks like this in place? If that doesn't
help can you let us know what browser and plugins you're using?

Gavin.

Revision history for this message
Quinta Helmer (qhelmer) said :
#2

I have never used a referrer block (to my knowledge at least) nor a browser extension that can do this. Why does your site need my referrer for these actions? Is there a way for me to easily check if I have a blocker that I don't know about?

Browser: Firefox 7.0.1 at Ubuntu 11.10
Extensions:
Flashblock,
Global Menu Bar Integration (for Unity),
Tree style tab,
Ubuntu Firefox Modifications,
and a Dutch dictionary.

Revision history for this message
Gavin Panella (allenap) said :
#3

> Why does your site need my referrer for these actions?

This helps to mitigate Cross-site request forgery attacks
<http://en.wikipedia.org/wiki/CSRF>. Launchpad requires a suitable
Referer header before performing any actions which make modifications.

> Is there a way for me to easily check if I have a blocker that I
> don't know about?

A search led me to:

  http://www.ericgiguere.com/tools/http-header-viewer.html

Check that there's a "referer" mentioned there.

> Browser: Firefox 7.0.1 at Ubuntu 11.10
> Extensions:
> Flashblock,
> Global Menu Bar Integration (for Unity),
> Tree style tab,
> Ubuntu Firefox Modifications,
> and a Dutch dictionary.

Nothing on that list should block a Referer header. To be honest, I'm
baffled.

There is a discussion in bug #560246 about the issues of using the
Referer as CSRF protection. You might wish to mention your problem in
there so that it becomes more of a priority to address.

Sorry I can't be of more help.

Gavin.

Revision history for this message
Quinta Helmer (qhelmer) said :
#4

In the comments of bug 560246 you mentioned, they said something about an add-on to set Firefox's sendRefererHeader setting. I checked this setting in my browser and somehow it was no longer set to the default (2: always send referer). After resetting this I can use all the links on your site again.