Welcome • User Guide
ToS • Privacy • Canary
Donate • Bugs • License

©2025 Poal.co

1.5K
•
Answered CRSF token expired

I had a thread open, left for awhile and came back. Submitted a comment and got this error message. Voting still worked.
Probably working as intended, as a timeout function to reduce server load. I copied my text, reloaded the page, no problem.

I had a thread open, left for awhile and came back. Submitted a comment and got this error message. Voting still worked. Probably working as intended, as a timeout function to reduce server load. I copied my text, reloaded the page, no problem.

(post is archived)

[–] [Sticky] • 1 pt (edited )

That is totally normal. You have to refresh a tab/page (that has been opened for too long) before trying to submit a post/comment or cast a vote.

You can also use the search:

https://poal.co/s/Poaldev/posts_search/token

[–] • 1 pt

You can refresh the token automatically on a post like you do on other requests.

Maybe I'll do the search you suggest.

[–] • 2 pts

I assume it's to thwart spammers.

[–] [deleted] • 1 pt

CRSF is to prevent hacking via request forgery, not for spammers.

Imagine for instance, you are logged into this website. You got my website, which contains an iframe. This iframe is an HTML page that contains a <form> which has it's action="" set to the handler for posting on Poal. On load, this form automatically submits. Without CRSF tokens, i'd be able to make posts in your name. Now imagine if this was paypal instead...

[–] [deleted] • 1 pt

Had it happen a few times. It's annoying.