See the attached screenshots, with 2.0-alpha3 I cannot seem to delete any of my projects! :'(
"Delete Project" link fails with 403 Exception: No valid crumb was included in the request
This menu item has been somewhat broken for a long time. There's a report that says it doesn't support CSRF protection from the popup menu, only from the side panel. Could also depend on the configured Jenkins URL I suppose.
CSRF prevention is enabled by default with 2.0 now, maybe it shouldn't be if it causes some serious issues like this?
CSRF stays in. If something is broken when it's enabled, it needs fixing.
Can easily reproduce JENKINS-18032 in 1.x, and I suppose nothing is different in 2.0 other than crumbs being enabled. Not sure what is going on from the attached video—are there popup dialogs being displayed that the screen capture did not include?
Jesse Glick no, there were no pop-up dialogs being shown when I experienced this issue. But like I said, I was not able to get a concise set of reproduction steps again after blowing away my JENKINS_HOME.
If this is the same issue as JENKINS-18032 then so be it shrug