Broken Webmail Styling due to missing XSRF tokens?
Our webmail page has no (or at least very broken) styling. See attachment.
Looking at the inspector, it appears assets like CSS and JS are not being served properly. Instead, for instance this url, oursite.tld:2096/cPanel_magic_revision_0/webmail/webs/mail_clients/mail_clients.css is shown (no cpsess?) and inspector obviously says "Resource interpreted as Stylesheet but transferred with MIME type text/html:".
The response for that link is an HTML page, with the following message:
How can I fix this? I thought it might be cloudflare related but we're not using cloudflare on there.
HTTP error 401
Invalid Security Token
The requested URL does not contain your session"s correct security token.
You may have reached this error by copying and pasting a URL from a different cPanel, WHM, or Webmail session into your browser"s address bar. To resolve this situation, please take one of the following steps:
[LIST]
Go back one page and reload the URL, making sure that the /cpsess " / section of the URL remains the same.
Re-enter your account"s password below. This will assign your session a new security token. This new token will prevent you from using other pages of this application that may be open in other tabs.
Request information
Requested page: cPanel_magic_revision_0/webmail/webs/mail_clients/mail_clients.css
How can I fix this? I thought it might be cloudflare related but we're not using cloudflare on there.
-
Try running a cPanel force update. /scripts/upcp --force
If the issue persists, open a cPanel support ticket : cPanel Customer Portal0 -
Hello, Could you verify if any custom themes or styles are assigned to this account? Thank you. 0 -
For anyone else reading this, it was a custom cpanel theme which, for all intents and purposes, was just a copy of the original x3 theme, but was out of date. cPanel support were great and sorted the issue through the ticket system. Many thanks. 0 -
I'm happy to see the issue is now resolved. Thank you for updating us with the outcome. 0
Please sign in to leave a comment.
Comments
4 comments