# CSRF problems with Firefox

**URL:** <https://discuss.dradis.com/t/csrf-problems-with-firefox/646>\
**Category:** Community Edition\
**Created:** [February 19, 2019, 9:55am UTC](https://discuss.dradis.com/t/csrf-problems-with-firefox/646 "2019-02-19T09:55:16Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![maxlawrie](https://avatars.discourse-cdn.com/v4/letter/m/bbe5ce/32.png) [@maxlawrie](https://discuss.dradis.com/u/maxlawrie)\
**Post date:** [February 19, 2019, 9:55am UTC](https://discuss.dradis.com/t/csrf-problems-with-firefox/646/1 "2019-02-19T09:55:16Z")

</div>

I have been trying to log in to Dradis in Kali, always getting the same error:

 ![image](https://canada1.discourse-cdn.com/flex035/uploads/dradisframework/original/1X/bef350e5acac44f1430c75985c1d627a1335165e.png)

I then reinstalled Dradis but still got the same error.

After some googling, I tried modifying application\_controller.rb as suggested in SO but the problem persisted. I then went to sign up for this forum and hit a similar problem when attempting to confirm my email: I was redirected to a page that simply said [“BAD CSRF”]

I then resorted to using chrome and was finally able to join the forum.

Does anyone know why Firefox does this? I can’t run chrome as root in my Kali VM so I still have not been able to log in. Any suggestions?

Cheers

---

<div class="post-metadata">

**Author:** ![maxlawrie](https://avatars.discourse-cdn.com/v4/letter/m/bbe5ce/32.png) [@maxlawrie](https://discuss.dradis.com/u/maxlawrie)\
**Post date:** [February 19, 2019, 10:01am UTC](https://discuss.dradis.com/t/csrf-problems-with-firefox/646/2 "2019-02-19T10:01:56Z")

</div>

Managed to get chrome to run as root in Kali but still get the same error:

 ![image](https://canada1.discourse-cdn.com/flex035/uploads/dradisframework/original/1X/ef279e73afe235eb8086bf013a0d0b77e9ff4ef3.png)

---

<div class="post-metadata">

**Author:** ![etd](https://yyz1.discourse-cdn.com/flex035/user_avatar/discuss.dradis.com/etd/32/5_2.png) [@etd](https://discuss.dradis.com/u/etd)\
**Post date:** [February 19, 2019, 10:50am UTC](https://discuss.dradis.com/t/csrf-problems-with-firefox/646/3 "2019-02-19T10:50:19Z")

</div>

This error happens when you provide the wrong shared password in the login form. A couple of options:

1. Reset the password so you can sign in with the right creds.
2. Apply this patch: [Warden - fix :failure\_app config by etdsoft · Pull Request #432 · dradis/dradis-ce · GitHub](https://github.com/dradis/dradis-ce/pull/432)