Steps to reproduce
1) Either visit [thread]/poll/create directly or open the thread view's 'create poll' link in a new tab.
2) Fill the form and submit.
3) The page will submit to itself, creating the poll, but will then redirect to itself and display a no permission error.
This happens because XF\ControllerPlugin\Poll::actionCreate uses a dynamic redirect after the poll is created. Since these 2 scenarios don't have referrers or ajax referrers, and since the poll creation form doesn't provide...
Read more
Continue reading...
1) Either visit [thread]/poll/create directly or open the thread view's 'create poll' link in a new tab.
2) Fill the form and submit.
3) The page will submit to itself, creating the poll, but will then redirect to itself and display a no permission error.
This happens because XF\ControllerPlugin\Poll::actionCreate uses a dynamic redirect after the poll is created. Since these 2 scenarios don't have referrers or ajax referrers, and since the poll creation form doesn't provide...
Read more
Continue reading...