Invalid CSRF Token

[Former user]

Getting this error every time I try and use any of the command buttons for a service being monitored by monit.

Pertinent part of the monit config:

set httpd port 2812 and use address 192.168.69.1 allow 192.168.69.0/24

This error only occurs if monit is bound to the 192.168.69.1 interface, which is a linux bridge interface (br0). If monit is bound to localhost and allow is set to localhost, no such error occurs. (But I have to use ssh tunnel to connect).

I tried adding a basic auth statement to the above config, but it appears to make no difference. :-(

[Tildeslash]

Monit 5.20 add the CSRF protection using double-submit-cookie pattern.

Please can you send screenshot of the error?

[c0m3d1an]

Attached!

[Tildeslash]

Thank you for data. It could be related to issue #495, which is fixed in the development version already.

Please can you test the development snapshot?

wget https://bitbucket.org/tildeslash/monit/get/master.tar.gz
tar -xzf master.tar.gz
cd tildeslash*
./boostrap
./configure
make

[c0m3d1an]

That fixed it!

[Tildeslash]

Duplicate of #495.

[Pol Isidor]

I compiled version 5.26 on Ubintu 18 x64 and I still have this error.

Before I get this error pop-up window appear in firefox:

Why?

How to fix it?