Invalid authenticity token only in IE6

Hi guys, I just discovered that both logging in and signing up does not work in IE6 due to an InvalidAuthenticityToken error. I'm using the latest restful-authetntication plugin. What's weird though, is that I viewed the source before submitting and took note of the token. After submission, on the error page (in the parameters section) the token is the exact same. The forms work in every other browser. What the heck?

We are seeing the same issue, but we're not using the restful- authentication plugin. Are you using jQuery or Prototype at all?

Yes, with some parts of the site, but not at all with the forms I'm having trouble with.

We have the same problem and after months we just can not figure out a working fix. I think it is in some way connected to the server config and the trusted zones model used in IE.

Are you in an iframe? IE6 and Safari famously don't let you set cookies in an iframe. Rails' csrf stuff then bites the dust.

No im not.

Were you ever able to resolve this? I need my web application to support IE6 and discovered that I'm suffering from the same problem.

What web server and version are you using?

We're using Apache 2.2.9 (mpm-worker) w/Passenger 2.0.6, on Ubuntu 9.04. And Rails 2.2.2.

I've got Apache 2.2.8 (prefork) on Ubuntu Server 8.10 proxying to one instance of my rails app (thin 1.0.0 w/rails 2.3.2)

Well, I don't know about others that may have this problem, but I solved my problem.

In order to test my web application across both versions of IE (6 and 7) I have version 7 installed and a "standalone" version of 6 installed.

The standalone version of IE6 doesn't appear to function properly with regards to cookies. I tested my web app on another machine that ONLY has IE6 (regular version) and it works fine.

I guess I'll have to set up a full VM to test my rails app on IE6 on my workstation. Oh well.

Thanks for the tip, I tested my app in a native IE6 VM and it works fine as well. It must have been that stand alone IE6 I was using. Phew!

I've been using standalone IE6 as well! This is good news. However, I get these errors every day on my production app; are there really that many people using standalone IE6?