“Uh oh! Your browser is blocking CSRF tokens!”

If you see this error message while using your PactSafe account, don't worry! The issue should be pretty simple to solve based on the browser that you use.

What are CSRF tokens? They are NOT related to the tokens you can include in your Contracts. CSRF stands for "Cross-Site Request Forgery" and is a type of exploit where someone can intercept calls your browser is making and change them without your knowledge. That's where CSRF tokens come in to save the day! Normally, your browser gets a valid _csrf secure cookie when you navigate to the site and we use it to make sure that every single call to PactSafe it coming from you. Learn more about CSRF style exploits here.

The “Uh oh! Your browser is blocking CSRF tokens!” message means that we couldn't verify the token stored in your browser. This is most likely caused by an advertisement or script-blocking plugin you may have installed. It can also be caused if browser is configured to prevent cookies from being sent and accessed.

If disabling your plugins did not solve the issue, here are some steps to update your browser's cookie settings.

Chrome

1. Open Chrome Settings.

2. Scroll to the bottom and click on Advanced.

3. In the Privacy and security section, click the Content Settings button.

4. Click on Cookies.

5. Next to Allow, click Add.

6. Type [*.]pactsafe.com and click Add.

7. Then type [*.]pactsafe.io and click Add.

8. Under All cookies and site data, search for "pactsafe", and delete all PactSafe-related entries.

9. Reload Chrome and log into PactSafe.
   
   

Firefox

1. Go to Firefox's Preferences -> Privacy & Security menu.

2. In the History section, select Use custom settings for history from the drop-down menu.

3. Click on Exceptions and whitelist https://app.pactsafe.com and https://pactsafe.io.

4. Scroll down to Site Data and click on Settings next to it.

5. Search for "pactsafe" and remove all shown entries.

6. Reload Firefox and log into PactSafe.

Note: If this alone doesn't help, try enabling third-party cookies in the Use custom settings for history menu, mentioned in step 2.

Safari

1. Open Safari Preferences from the drop-down menu in the navigation bar or by typing Cmd + , (⌘,).

2. Click the Privacy tab and make sure that "Cookies and website data" is set to either "Always allow" or "Allow from websites I visit".

3. Click on the Manage Website Data button to see all locally stored website data.

4. Search for “pactsafe” and remove all Pactsafe-related entries.

5. Reload Safari and log into PactSafe.

Tip: Temporarily switching browsers in the meantime often works as a workaround for this issue, too!