Reputation: 830
I have an issue in Google Chrome. Included html imports are loaded twice.
Chrome makes 2 request to server, but the javascript in imported file is run once. As a result it breaks the CSRF protection, because token is generated twice for each request, and Chrome puts only first file content with outdated token.
This situation occurs only when DevTools are opened.
Checklist done:
Upvotes: 3
Views: 198
Reputation: 24068
This appears to be an issue in the current release of Chrome (51.0.2704.84), and it seems to be fixed in Chrome Canary (53.0.2766.0), since I tried a simple example myself and only one request shows in the Network tab.
Upvotes: 5