{"action":"closed","issue":{"url":"https://api.github.com/repos/mhfs/sidekiq-failures/issues/98","labels_url":"https://api.github.com/repos/mhfs/sidekiq-failures/issues/98/labels{/name}","comments_url":"https://api.github.com/repos/mhfs/sidekiq-failures/issues/98/comments","events_url":"https://api.github.com/repos/mhfs/sidekiq-failures/issues/98/events","html_url":"https://github.com/mhfs/sidekiq-failures/issues/98","id":96123635,"number":98,"title":"The new CSRF protection breaks retry/delete functionality","user":{"login":"JamesChevalier","id":408939,"avatar_url":"https://avatars.githubusercontent.com/u/408939?v=3","gravatar_id":"","url":"https://api.github.com/users/JamesChevalier","html_url":"https://github.com/JamesChevalier","followers_url":"https://api.github.com/users/JamesChevalier/followers","following_url":"https://api.github.com/users/JamesChevalier/following{/other_user}","gists_url":"https://api.github.com/users/JamesChevalier/gists{/gist_id}","starred_url":"https://api.github.com/users/JamesChevalier/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JamesChevalier/subscriptions","organizations_url":"https://api.github.com/users/JamesChevalier/orgs","repos_url":"https://api.github.com/users/JamesChevalier/repos","events_url":"https://api.github.com/users/JamesChevalier/events{/privacy}","received_events_url":"https://api.github.com/users/JamesChevalier/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-07-20T18:10:45Z","updated_at":"2015-07-21T13:28:49Z","closed_at":"2015-07-21T13:28:49Z","body":"https://github.com/mperham/sidekiq/blob/master/Changes.md#342\r\n\r\nThere's a new `csrf_tag` being used throughout the sidekiq web ui now. You can see an example of it in use in the [schedule](https://github.com/mperham/sidekiq/blob/5adbc24cbeef10b05f5737e96bb71e2b0b6d0595/web/views/scheduled.erb#L16) page.\r\n\r\nThe lack of this tag is causing the site to respond with `Forbidden` instead of retrying/deleting the failed jobs (which I incorrectly reported over in [#1289](https://github.com/mperham/sidekiq/issues/1289)).\r\n\r\nI haven't had the chance to test whether there's further setup needed elsewhere in this gem, or if simply including `<%= csrf_tag %>` within the form will resolve the issue. I hope to update this issue later, after I have a chance to test that out."}}