Page 1 of 1

Illegal cookie warning

Posted: May 29th, 2017, 6:09 am
by joao
Hi all,

I have sabnzbd installed on my Windows Server 2012 behind an ASUS AC66U.

Whenever I login the ASUS web interface: https://192.168.1.1:8443/Main_Login.asp and I start the SABNZBD webpage: https://192.168.1.100:9090 I get below error:

Code: Select all

400 Bad Request
Illegal cookie name traffic_warning_0

Traceback (most recent call last):
  File "cherrypy\_cprequest.pyo", line 635, in respond
  File "cherrypy\_cprequest.pyo", line 737, in process_headers
HTTPError: (400, 'Illegal cookie name traffic_warning_0')
Powered by CherryPy 8.1.2
Once I remove the cooking called traffic_warning_0, I get a different error:

Code: Select all

400 Bad Request
Illegal cookie name wireless_list_10:C3:7B:DE:6E:10_temp

Traceback (most recent call last):
  File "cherrypy\_cprequest.pyo", line 635, in respond
  File "cherrypy\_cprequest.pyo", line 737, in process_headers
HTTPError: (400, 'Illegal cookie name wireless_list_10:C3:7B:DE:6E:10_temp')
Powered by CherryPy 8.1.2
And so on. There are around 3-4 cooking which I need to clear to ensure I can login the sabnzbd portal again.
What I found out is that all these cooking come from the ASUS web interface after logging in.

- asus_token
- traffic_warning_0
- wireless_list*

Image

Is there any way to ensure SABNZBD accepts these cookies? My understanding is that CherryPy checks the cooking names and sees this one as invalid? But it isn't even using this cooking right?

Thanks in advance.

Re: Illegal cookie warning

Posted: December 4th, 2017, 11:02 am
by Mosser
joaor wrote: May 29th, 2017, 6:09 am
Is there any way to ensure SABNZBD accepts these cookies? My understanding is that CherryPy checks the cooking names and sees this one as invalid? But it isn't even using this cooking right?

Thanks in advance.
So is there a way to do this?

Re: Illegal cookie warning

Posted: December 4th, 2017, 11:27 am
by safihre
The ASUS is setting illegal cookies using the colon in the cookie name, making the SABnzbd webserver unable to continue processing.
It's kind of strange that they share cookies, if both using different IPs.

Usually it helps to for example access SABnzbd through the device-name instead of the IP-address, if this is possible. Or run in incognito-mode for the bad device that makes the bad cookies, so they don't get saved.