{"action":"created","issue":{"url":"https://api.github.com/repos/plone/plone.protect/issues/10","labels_url":"https://api.github.com/repos/plone/plone.protect/issues/10/labels{/name}","comments_url":"https://api.github.com/repos/plone/plone.protect/issues/10/comments","events_url":"https://api.github.com/repos/plone/plone.protect/issues/10/events","html_url":"https://github.com/plone/plone.protect/issues/10","id":89543223,"number":10,"title":"CSRF protection override doesn't propagate to parent request","user":{"login":"mattss","id":1155400,"avatar_url":"https://avatars.githubusercontent.com/u/1155400?v=3","gravatar_id":"","url":"https://api.github.com/users/mattss","html_url":"https://github.com/mattss","followers_url":"https://api.github.com/users/mattss/followers","following_url":"https://api.github.com/users/mattss/following{/other_user}","gists_url":"https://api.github.com/users/mattss/gists{/gist_id}","starred_url":"https://api.github.com/users/mattss/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mattss/subscriptions","organizations_url":"https://api.github.com/users/mattss/orgs","repos_url":"https://api.github.com/users/mattss/repos","events_url":"https://api.github.com/users/mattss/events{/privacy}","received_events_url":"https://api.github.com/users/mattss/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-06-19T11:40:08Z","updated_at":"2015-07-19T18:02:39Z","closed_at":null,"body":"If I mark the request with IDisableCSRFProtection during a plone.subrequest, this interface is applied only to the subrequest itself, and not the parent. This makes it impossible to disable CSRF protection inside tile code.\r\n\r\nThis is causing me specific issues using plone.app.imaging scales inside a tile, as the scales are generated when the tile is rendered, and then CSRF auto-protect blocks the main page request."},"comment":{"url":"https://api.github.com/repos/plone/plone.protect/issues/comments/122689227","html_url":"https://github.com/plone/plone.protect/issues/10#issuecomment-122689227","issue_url":"https://api.github.com/repos/plone/plone.protect/issues/10","id":122689227,"user":{"login":"vangheem","id":524413,"avatar_url":"https://avatars.githubusercontent.com/u/524413?v=3","gravatar_id":"","url":"https://api.github.com/users/vangheem","html_url":"https://github.com/vangheem","followers_url":"https://api.github.com/users/vangheem/followers","following_url":"https://api.github.com/users/vangheem/following{/other_user}","gists_url":"https://api.github.com/users/vangheem/gists{/gist_id}","starred_url":"https://api.github.com/users/vangheem/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vangheem/subscriptions","organizations_url":"https://api.github.com/users/vangheem/orgs","repos_url":"https://api.github.com/users/vangheem/repos","events_url":"https://api.github.com/users/vangheem/events{/privacy}","received_events_url":"https://api.github.com/users/vangheem/received_events","type":"User","site_admin":false},"created_at":"2015-07-19T18:02:39Z","updated_at":"2015-07-19T18:02:39Z","body":"I have no idea how to fix this.\r\n\r\nIt's a problem that scales are being generated when you just need a url for a scale. If we're going to lazy load scales, it should be done on the request of the scale."}}