RT has detected a possible cross-site request forgery for this request, because the Referrer header supplied by your browser (178.62.201.111:80) is not allowed by RT's configured hostname (deb5.localdomain:80)

RT Users
1

RT has detected a possible cross-site request forgery for this request, because the Referrer header supplied by your browser (178.62.201.111:80) is not allowed by RT’s configured hostname (deb5.localdomain:80). A malicious attacker may be trying to modify RT’s configuration on your behalf. If you did not initiate this request, then you should alert your security team.

If you really intended to visit http://deb5.localdomain/rt/Admin/Users/Modify.html and modify RT’s configuration, then click here to resume your request .

i put this line in RT_SiteConfig.pm Under /usr/share/request-tracker4/

Set(@ReferrerWhitelist,qw(localhost:80,127.0.0.1:80));

but it didn’T fix the problem ! any other solution ?

2

Put 178.62.201.111:80 into the white list.

3

178.62.201.111 should be the $WebDomain value and the $WebPort should be 80

4

proto@deb5:/usr/share/request-tracker4/etc$ cat RT_SiteConfig.pm
use utf8;
Set($rtname, “Example RT”);
Set(@ReferrerWhitelist,qw(localhost:80,127.0.0.1:80));
Set(@ReferrerWhitelist,qw(deb5.localdomain:80,127.0.0.1:80))
Set($WebDomain, ‘178.62.201.111’);
Set($WebPort, 80);
1;

it didn’T work

5

Did you restart your web server?

6

yes , same thing , should i put /rt in front of localhost
because my rt is under 178.62.201.111/rt ???

7

Is it the same error? Ie it’s still looking for “deb5.localdomain”?

$WebDomain: Domain name of the RT server, e.g. ‘www.example.com’. It should not contain anything except the server name.

8

Set($WebDomain, ‘178.62.201.111’);

it is set like that , and yes it’s showing me the same error

9

does the etc/hosts file effect this ??

10

The error suggest that you are setting Set($WebDomain, 'deb5.localdomain'); somewhere and your RT is using that configuration value.

11

i have a doubt that i’m editing the wrong file in the wrong directory !