I've been told that there's something iffy about the cookie banner/page and that clicking the "Accept all cookies" (/misc/cookies?update=1&accept=1) or "Reject optional cookies" (/misc/cookies?update=1&reject=1) throws an error.
I could replicate this with a Firefox in incognito mode. The Cookies page (/misc/cookies) loads fine, and if I click the "Save cookie preferences" at the bottom then I see an overlay that the settings were saved, page returns to root of the forum, and all is fine. But if I click either of the two buttons at the top, for all cookies or only the necessary ones, the forum throws a security error.
Could someone help figure out where it's coming from, please?
What I have tried already was to disable all plugins (no change) and disable all Cloudflare security rules (also no change). If I look through the analytics in Cloudflare, I can see that the hosting server is responding with HTTP 200 on the cookies page, but throws a 400 Bad Request when those GET parameters are also provided.
The cookies page is not being cached in Cloudflare for guests without cookies.
The .htaccess also doesn't have anything remotely linked to this.
The issue does not appear once logged in.
Could there be a permissions setting for the guest/unauthenticated group? I don't recall to have seen one... I also don't expect this to be caused by Firefox's settings for privacy.
I'd appreciate any ideas. Many thanks in advance.
I could replicate this with a Firefox in incognito mode. The Cookies page (/misc/cookies) loads fine, and if I click the "Save cookie preferences" at the bottom then I see an overlay that the settings were saved, page returns to root of the forum, and all is fine. But if I click either of the two buttons at the top, for all cookies or only the necessary ones, the forum throws a security error.
Could someone help figure out where it's coming from, please?
What I have tried already was to disable all plugins (no change) and disable all Cloudflare security rules (also no change). If I look through the analytics in Cloudflare, I can see that the hosting server is responding with HTTP 200 on the cookies page, but throws a 400 Bad Request when those GET parameters are also provided.
The cookies page is not being cached in Cloudflare for guests without cookies.
The .htaccess also doesn't have anything remotely linked to this.
The issue does not appear once logged in.
Could there be a permissions setting for the guest/unauthenticated group? I don't recall to have seen one... I also don't expect this to be caused by Firefox's settings for privacy.
I'd appreciate any ideas. Many thanks in advance.
