Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

can´t disable xsrf token

Gerardo Guajardo
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
November 28, 2012

i try to use this link to create an issue

http://xxxxxxxxxx:8080/secure/CreateIssueDetails.jspa?pid=10000&issuetype=9&summary=BLA&myParameter=true

but i receive this followin error

---------------

XSRF Security Token Missing

-------------------

i tried to disable the the XSRF token option

follow the instructions of the next page

https://developer.atlassian.com/display/JIRADEV/Form+Token+Handling

using this property and value in the jira-application.properties file

jira.xsrf.enabled=false

but it doesn't work

i tried to find jira-config.properties file in the JIRA-HOME directory but the file it's not there

please help

i need this for a demo

i can't use the Advanced Config interface because i don't have JIRA-System-Administrator permission

i don't know why this permission isn't on the global-permission section

3 answers

1 vote
Matheus Fernandes
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
November 28, 2012

Indeed you'll need to change this option in the <tt>jira-config.properties</tt> file rather than in the <tt>jira-application.properties </tt>if you are running a more recent release of JIRA. Also, in new JIRA installations, this file may not initially exist and if so, needs to be created manually - Just add the 'jira.xsrf.enabled=false' option to the file and restart JIRA so the changes will take effect. :)

Gerardo Guajardo
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
December 4, 2012

thanks

0 votes
Lou-Guardia September 29, 2020

So I encountered this issue today when trying to clear the default value for Resolution field. The fix I have found for this is to go to the WEB-INF/classes directory and modify the value below from true to false in the jpm.xml file . You will have to restart jira for change to take effect.xsrf.jpg

Vedika Tambolkar
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
December 8, 2020

@Lou-Guardia Can you confirm which Jira version did you observe this?

0 votes
maheshwar August 4, 2013

I am on Jira 6, this tip unfortunately did not work for me. Any idea?

Eric Dalgliesh
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
January 27, 2014

You may have run into https://jira.atlassian.com/browse/JRA-34749- you can vote or comment there. Alternatively you can use the "X-Atlassian-Token: nocheck" header if you're using a script.

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events