Support Offline : Mon - Fri / 10am - 6pm (GMT +6)

Your Time: Our Time:

Failed to load resource: Request header field X-CSRF-Token is not allowed by Access-Control-Allow-Headers.

Featured Lock Resolved Issue
I am having an issue loading external .json in pagebuilder. I get Failed to load resource: Request header field X-CSRF-Token is not allowed by Access-Control-Allow-Headers. but it is on the JSON header. It works on pages without pagebuilder. Was wondering if anyone could help me out.

2 Answers

newberryb

More than a month ago #Permalink
I have found that removing this line from sppagebuilder.php line fixes the problem
//CSRF
\JHtml::_('jquery.token');

but what does that mean for the security of SPPagebuilder. I worry that I opened up an exploit in my website by doing this. Is this the case?

[email protected]

More than a month ago #Permalink
Hello,

I'm having the same issue on 3 of my sites. Glad I found this, because at least now my sites work, but what about the security risk newberryb mentioned?

Thank you,
John


There are no replies made for this post yet.
Be one of the first to reply to this post!

Leaderboard (30 days)

Paul Frankowski

Paul Frankowski

Total Accepted Answers: 112
Toufiq

Toufiq

Total Accepted Answers: 62
Mehtaz Afsana Borsha

Mehtaz Afsana Borsha

Total Accepted Answers: 26
Ofi Khan

Ofi Khan

Total Accepted Answers: 11
Rashida Rahman

Rashida Rahman

Total Accepted Answers: 8

120

Templates

310576

Community Users

Newsletter

Don’t miss any updates of our new templates and extensions and all the astonishing offers we bring for you.
We never spam

Joomla! ® name is used under a limited license from Open Source Matters in the United States and other countries. JoomShaper.com is not affiliated with or endorsed by Open Source Matters or the Joomla! Project.

Connect Us