# Discourse Dockerでの突然のHTTP 403エラー（"BAD CSRF"）

**URL:** https://meta.discourse.org/t/sudden-http-403-errors-with-discourse-docker-bad-csrf/343948
**Category:** Bug
**Created:** [2024 年 12 月 22 日午後 9:07 UTC](https://meta.discourse.org/t/sudden-http-403-errors-with-discourse-docker-bad-csrf/343948 "2024-12-22T21:07:27Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![claas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/claas/32/71725_2.png) [@claas](https://meta.discourse.org/u/claas)
#### Post date: [2024 年 12 月 22 日午後 9:08 UTC](https://meta.discourse.org/t/sudden-http-403-errors-with-discourse-docker-bad-csrf/343948/2 "2024-12-22T21:08:37Z")

</div>

これで 3.3.4 で修正されるでしょうか？

> <https://github.com/discourse/discourse/pull/30410>
>
> The security fix in 15b43a2 also introduced some unrelated refactoring to the fi…le, which seems to be causing issues in some environments. This commit reverts the refactoring, and applies the security fix to each block individually.

こちらも参照してください。

> [@SSO broken after rebuild with stable v3.3.3](https://meta.discourse.org/t/sso-broken-after-rebuild-with-stable-v3-3-3/343847/10):
>
> I suspect the issue here is not the [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true) security fix but rather the nginx change. On tests-passed we had to make a followup on Thursday because it was causing problems on some environments and [another user](https://github.com/discourse/discourse/pull/30383#issuecomment-2557996967) on Github noted CSRF issues. I have a backport ready for that: [FIX: Simplify nginx config change (#30383) by pmusaraj · Pull Request #30410 · discourse/discourse · GitHub](https://github.com/discourse/discourse/pull/30410), it should be merged shortly (once someone in the team approves it, though it’s Sunday for most people). You’…

---

_[View the full topic](https://meta.discourse.org/t/sudden-http-403-errors-with-discourse-docker-bad-csrf/343948)._
