Invalid authenticity tokens

[Christopher Bennell]

We've been having some problems with our users being unable to upload files - the uploads fail. These failed uploads are the result of this error:

ActionController::InvalidAuthenticityToken: app/controllers/application_controller.rb:885:in `verify_authenticity_token'

Turning off protect_from_forgery in the application controller fixes this, but that's obviously not a solution. I'm also getting the same error at this url: https://canvas.ocadu.ca/page_views/{...}

Has anyone else seen this error? Any ideas? Thanks in advance.

[Trương Hoàng Dũng]

We also faced this upload issue when uploading files from the Files page. But when uploading files via the WYSIWYG tool, we got no problems. Is this the flash and web browser issue ?

[Christopher Bennell]

Also, if Flash is disabled, does the 'Add Files' link just stop working altogether? There seems to be no fallback or indication that flash is required. 

[htxa...@gmail.com]

I have the same issue, but if I drag and drop a file into the folder it succeeds (using Firefox).

There is a related thread here https://groups.google.com/forum/#!msg/canvas-lms-users/1P1PDC4B6Mg/6qKPRI3SixMJ