Error 403 Forbidden

GET https://jw.gd/logout?_csrf_token%253Dcsrf-token%3D=

IP
34.206.249.188
Profiled on
Token
dba3aa
Forwarded to ErrorController (b209f3)

Exceptions

LogoutException AccessDeniedHttpException

HTTP 403 Forbidden

Invalid CSRF token.

Exceptions 2

Symfony\Component\HttpKernel\Exception\ AccessDeniedHttpException

Show exception properties 
Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException {#564
  -statusCode: 403
  -headers: []
}
in vendor/symfony/security-http/Firewall/ExceptionListener.php (line 171)
  1. }
  2. }
  4. private function handleLogoutException(ExceptionEvent $event, LogoutException $exception): void
  5. {
  6. $event->setThrowable(new AccessDeniedHttpException($exception->getMessage(), $exception));
  8. $this->logger?->info('A LogoutException was thrown; wrapping with AccessDeniedHttpException', ['exception' => $exception]);
  9. }
  11. private function startAuthentication(Request $request, AuthenticationException $authException): Response
in vendor/symfony/security-http/Firewall/ExceptionListener.php -> handleLogoutException (line 105)
  2. return;
  3. }
  5. if ($exception instanceof LogoutException) {
  6. $this->handleLogoutException($event, $exception);
  8. return;
  9. }
  10. } while (null !== $exception = $exception->getPrevious());
  11. }
in vendor/symfony/event-dispatcher/Debug/WrappedListener.php -> onKernelException (line 115)
  1. $this->priority ??= $dispatcher->getListenerPriority($eventName, $this->listener);
  3. $e = $this->stopwatch->start($this->name, 'event_listener');
  5. try {
  6. ($this->optimizedListener ?? $this->listener)($event, $eventName, $dispatcher);
  7. } finally {
  8. if ($e->isStarted()) {
  9. $e->stop();
  10. }
  11. }
in vendor/symfony/event-dispatcher/EventDispatcher.php -> __invoke (line 206)
  2. foreach ($listeners as $listener) {
  3. if ($stoppable && $event->isPropagationStopped()) {
  4. break;
  5. }
  6. $listener($event, $eventName, $this);
  7. }
  8. }
  10. /**
  11. * Sorts the internal list of listeners for the given event by priority.
in vendor/symfony/event-dispatcher/EventDispatcher.php -> callListeners (line 56)
  1. } else {
  2. $listeners = $this->getListeners($eventName);
  3. }
  5. if ($listeners) {
  6. $this->callListeners($listeners, $eventName, $event);
  7. }
  9. return $event;
  10. }
in vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php -> dispatch (line 129)
  1. try {
  2. $this->beforeDispatch($eventName, $event);
  3. try {
  4. $e = $this->stopwatch->start($eventName, 'section');
  5. try {
  6. $this->dispatcher->dispatch($event, $eventName);
  7. } finally {
  8. if ($e->isStarted()) {
  9. $e->stop();
  10. }
  11. }
in vendor/symfony/http-kernel/HttpKernel.php -> dispatch (line 241)
  1. * Handles a throwable by trying to convert it to a Response.
  2. */
  3. private function handleThrowable(\Throwable $e, Request $request, int $type): Response
  4. {
  5. $event = new ExceptionEvent($this, $request, $type, $e, isKernelTerminating: $this->terminating);
  6. $this->dispatcher->dispatch($event, KernelEvents::EXCEPTION);
  8. // a listener might have replaced the exception
  9. $e = $event->getThrowable();
  11. if (!$event->hasResponse()) {
in vendor/symfony/http-kernel/HttpKernel.php -> handleThrowable (line 91)
  1. $this->finishRequest($request, $type);
  3. throw $e;
  4. }
  6. return $response = $this->handleThrowable($e, $request, $type);
  7. } finally {
  8. $this->requestStack->pop();
  10. if ($response instanceof StreamedResponse && $callback = $response->getCallback()) {
  11. $requestStack = $this->requestStack;
in vendor/symfony/http-kernel/Kernel.php -> handle (line 193)
  1. if (!$this->handlingHttpCache) {
  2. $this->resetServices = true;
  3. }
  5. try {
  6. return $this->getHttpKernel()->handle($request, $type, $catch);
  7. } finally {
  8. --$this->requestStackSize;
  9. }
  10. }
in vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php -> handle (line 35)
  1. ) {
  2. }
  4. public function run(): int
  5. {
  6. $response = $this->kernel->handle($this->request);
  8. if (Kernel::VERSION_ID >= 60400) {
  9. $response->send(false);
  11. if (\function_exists('fastcgi_finish_request') && !$this->debug) {
in vendor/autoload_runtime.php -> run (line 32)
  1. $app = $app(...$args);
  3. exit(
  4. $runtime
  5. ->getRunner($app)
  6. ->run()
  7. );
require_once('/home/cjiwqkc/jw.gd/vendor/autoload_runtime.php') in public/index.php (line 5)
  1. <?php
  3. use App\Kernel;
  5. require_once dirname(__DIR__).'/vendor/autoload_runtime.php';
  7. return static function (array $context) {
  8. return new Kernel($context['APP_ENV'], (bool) $context['APP_DEBUG']);
  9. };

Symfony\Component\Security\Core\Exception\ LogoutException

Invalid CSRF token.

in vendor/symfony/security-http/Firewall/LogoutListener.php (line 75)
  2. if (null !== $this->csrfTokenManager) {
  3. $csrfToken = ParameterBagUtils::getRequestParameterValue($request, $this->options['csrf_parameter'], $request->request->all());
  5. if (!\is_string($csrfToken) || false === $this->csrfTokenManager->isTokenValid(new CsrfToken($this->options['csrf_token_id'], $csrfToken))) {
  6. throw new LogoutException('Invalid CSRF token.');
  7. }
  8. }
  10. $logoutEvent = new LogoutEvent($request, $this->tokenStorage->getToken());
  11. $this->eventDispatcher->dispatch($logoutEvent);
in vendor/symfony/security-bundle/Debug/WrappedLazyListener.php -> authenticate (line 46)
  1. public function authenticate(RequestEvent $event): void
  2. {
  3. $startTime = microtime(true);
  5. try {
  6. $this->listener->authenticate($event);
  7. } catch (LazyResponseException $e) {
  8. $this->response = $e->getResponse();
  10. throw $e;
  11. } finally {
in vendor/symfony/security-bundle/Debug/TraceableFirewallListener.php -> authenticate (line 94)
  2. foreach ($requestListeners as $listener) {
  3. if (!$listener instanceof FirewallListenerInterface) {
  4. $listener($event);
  5. } elseif (false !== $listener->supports($event->getRequest())) {
  6. $listener->authenticate($event);
  7. }
  9. if ($event->hasResponse()) {
  10. break;
  11. }
in vendor/symfony/security-http/Firewall.php -> callListeners (line 93)
  1. if (null !== $logoutListener) {
  2. yield $logoutListener;
  3. }
  4. };
  6. $this->callListeners($event, $authenticationListeners());
  7. }
  9. /**
  10. * @return void
  11. */
in vendor/symfony/event-dispatcher/Debug/WrappedListener.php -> onKernelRequest (line 115)
  1. $this->priority ??= $dispatcher->getListenerPriority($eventName, $this->listener);
  3. $e = $this->stopwatch->start($this->name, 'event_listener');
  5. try {
  6. ($this->optimizedListener ?? $this->listener)($event, $eventName, $dispatcher);
  7. } finally {
  8. if ($e->isStarted()) {
  9. $e->stop();
  10. }
  11. }
in vendor/symfony/event-dispatcher/EventDispatcher.php -> __invoke (line 206)
  2. foreach ($listeners as $listener) {
  3. if ($stoppable && $event->isPropagationStopped()) {
  4. break;
  5. }
  6. $listener($event, $eventName, $this);
  7. }
  8. }
  10. /**
  11. * Sorts the internal list of listeners for the given event by priority.
in vendor/symfony/event-dispatcher/EventDispatcher.php -> callListeners (line 56)
  1. } else {
  2. $listeners = $this->getListeners($eventName);
  3. }
  5. if ($listeners) {
  6. $this->callListeners($listeners, $eventName, $event);
  7. }
  9. return $event;
  10. }
in vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php -> dispatch (line 129)
  1. try {
  2. $this->beforeDispatch($eventName, $event);
  3. try {
  4. $e = $this->stopwatch->start($eventName, 'section');
  5. try {
  6. $this->dispatcher->dispatch($event, $eventName);
  7. } finally {
  8. if ($e->isStarted()) {
  9. $e->stop();
  10. }
  11. }
in vendor/symfony/http-kernel/HttpKernel.php -> dispatch (line 159)
  1. */
  2. private function handleRaw(Request $request, int $type = self::MAIN_REQUEST): Response
  3. {
  4. // request
  5. $event = new RequestEvent($this, $request, $type);
  6. $this->dispatcher->dispatch($event, KernelEvents::REQUEST);
  8. if ($event->hasResponse()) {
  9. return $this->filterResponse($event->getResponse(), $request, $type);
  10. }
in vendor/symfony/http-kernel/HttpKernel.php -> handleRaw (line 76)
  1. $request->headers->set('X-Php-Ob-Level', (string) ob_get_level());
  3. $this->requestStack->push($request);
  4. $response = null;
  5. try {
  6. return $response = $this->handleRaw($request, $type);
  7. } catch (\Throwable $e) {
  8. if ($e instanceof \Error && !$this->handleAllThrowables) {
  9. throw $e;
  10. }
in vendor/symfony/http-kernel/Kernel.php -> handle (line 193)
  1. if (!$this->handlingHttpCache) {
  2. $this->resetServices = true;
  3. }
  5. try {
  6. return $this->getHttpKernel()->handle($request, $type, $catch);
  7. } finally {
  8. --$this->requestStackSize;
  9. }
  10. }
in vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php -> handle (line 35)
  1. ) {
  2. }
  4. public function run(): int
  5. {
  6. $response = $this->kernel->handle($this->request);
  8. if (Kernel::VERSION_ID >= 60400) {
  9. $response->send(false);
  11. if (\function_exists('fastcgi_finish_request') && !$this->debug) {
in vendor/autoload_runtime.php -> run (line 32)
  1. $app = $app(...$args);
  3. exit(
  4. $runtime
  5. ->getRunner($app)
  6. ->run()
  7. );
require_once('/home/cjiwqkc/jw.gd/vendor/autoload_runtime.php') in public/index.php (line 5)
  1. <?php
  3. use App\Kernel;
  5. require_once dirname(__DIR__).'/vendor/autoload_runtime.php';
  7. return static function (array $context) {
  8. return new Kernel($context['APP_ENV'], (bool) $context['APP_DEBUG']);
  9. };

Logs

Level Channel Message
DEBUG 00:06:35 php Warning: Zend OPcache API is restricted by "restrict_api" configuration directive 
{
    "exception": {
        "severity": 2,
        "file": "/home/cjiwqkc/jw.gd/vendor/symfony/error-handler/DebugClassLoader.php",
        "line": 318,
        "trace": [
            {
                "file": "/home/cjiwqkc/jw.gd/vendor/doctrine/doctrine-bundle/src/DoctrineBundle.php",
                "line": 136,
                "function": "loadClass",
                "class": "Symfony\\Component\\ErrorHandler\\DebugClassLoader",
                "type": "->"
            }
        ],
        "count": 26
    }
}
INFO 00:06:35 request Matched route "_profiler". 
{
    "route": "_profiler",
    "route_parameters": {
        "_route": "_profiler",
        "_controller": "web_profiler.controller.profiler::panelAction",
        "token": "dba3aa"
    },
    "request_uri": "https://www.jw.gd/public/_profiler/dba3aa?panel=exception&type=request",
    "method": "GET"
}

Stack Traces 2

[2/2] AccessDeniedHttpException 
Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException:
Invalid CSRF token.

  at vendor/symfony/security-http/Firewall/ExceptionListener.php:171
  at Symfony\Component\Security\Http\Firewall\ExceptionListener->handleLogoutException(object(ExceptionEvent), object(LogoutException))
     (vendor/symfony/security-http/Firewall/ExceptionListener.php:105)
  at Symfony\Component\Security\Http\Firewall\ExceptionListener->onKernelException(object(ExceptionEvent), 'kernel.exception', object(TraceableEventDispatcher))
     (vendor/symfony/event-dispatcher/Debug/WrappedListener.php:115)
  at Symfony\Component\EventDispatcher\Debug\WrappedListener->__invoke(object(ExceptionEvent), 'kernel.exception', object(TraceableEventDispatcher))
     (vendor/symfony/event-dispatcher/EventDispatcher.php:206)
  at Symfony\Component\EventDispatcher\EventDispatcher->callListeners(array(object(WrappedListener), object(WrappedListener), object(WrappedListener), object(WrappedListener), object(WrappedListener)), 'kernel.exception', object(ExceptionEvent))
     (vendor/symfony/event-dispatcher/EventDispatcher.php:56)
  at Symfony\Component\EventDispatcher\EventDispatcher->dispatch(object(ExceptionEvent), 'kernel.exception')
     (vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php:129)
  at Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher->dispatch(object(ExceptionEvent), 'kernel.exception')
     (vendor/symfony/http-kernel/HttpKernel.php:241)
  at Symfony\Component\HttpKernel\HttpKernel->handleThrowable(object(LogoutException), object(Request), 1)
     (vendor/symfony/http-kernel/HttpKernel.php:91)
  at Symfony\Component\HttpKernel\HttpKernel->handle(object(Request), 1, true)
     (vendor/symfony/http-kernel/Kernel.php:193)
  at Symfony\Component\HttpKernel\Kernel->handle(object(Request))
     (vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php:35)
  at Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner->run()
     (vendor/autoload_runtime.php:32)
  at require_once('/home/cjiwqkc/jw.gd/vendor/autoload_runtime.php')
     (public/index.php:5)
[1/2] LogoutException 
Symfony\Component\Security\Core\Exception\LogoutException:
Invalid CSRF token.

  at vendor/symfony/security-http/Firewall/LogoutListener.php:75
  at Symfony\Component\Security\Http\Firewall\LogoutListener->authenticate(object(RequestEvent))
     (vendor/symfony/security-bundle/Debug/WrappedLazyListener.php:46)
  at Symfony\Bundle\SecurityBundle\Debug\WrappedLazyListener->authenticate(object(RequestEvent))
     (vendor/symfony/security-bundle/Debug/TraceableFirewallListener.php:94)
  at Symfony\Bundle\SecurityBundle\Debug\TraceableFirewallListener->callListeners(object(RequestEvent), object(Generator))
     (vendor/symfony/security-http/Firewall.php:93)
  at Symfony\Component\Security\Http\Firewall->onKernelRequest(object(RequestEvent), 'kernel.request', object(TraceableEventDispatcher))
     (vendor/symfony/event-dispatcher/Debug/WrappedListener.php:115)
  at Symfony\Component\EventDispatcher\Debug\WrappedListener->__invoke(object(RequestEvent), 'kernel.request', object(TraceableEventDispatcher))
     (vendor/symfony/event-dispatcher/EventDispatcher.php:206)
  at Symfony\Component\EventDispatcher\EventDispatcher->callListeners(array(object(WrappedListener), object(WrappedListener), object(WrappedListener), object(WrappedListener), object(WrappedListener), object(WrappedListener), object(WrappedListener), object(WrappedListener), object(WrappedListener), object(WrappedListener), object(WrappedListener), object(WrappedListener), object(WrappedListener)), 'kernel.request', object(RequestEvent))
     (vendor/symfony/event-dispatcher/EventDispatcher.php:56)
  at Symfony\Component\EventDispatcher\EventDispatcher->dispatch(object(RequestEvent), 'kernel.request')
     (vendor/symfony/event-dispatcher/Debug/TraceableEventDispatcher.php:129)
  at Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher->dispatch(object(RequestEvent), 'kernel.request')
     (vendor/symfony/http-kernel/HttpKernel.php:159)
  at Symfony\Component\HttpKernel\HttpKernel->handleRaw(object(Request), 1)
     (vendor/symfony/http-kernel/HttpKernel.php:76)
  at Symfony\Component\HttpKernel\HttpKernel->handle(object(Request), 1, true)
     (vendor/symfony/http-kernel/Kernel.php:193)
  at Symfony\Component\HttpKernel\Kernel->handle(object(Request))
     (vendor/symfony/runtime/Runner/Symfony/HttpKernelRunner.php:35)
  at Symfony\Component\Runtime\Runner\Symfony\HttpKernelRunner->run()
     (vendor/autoload_runtime.php:32)
  at require_once('/home/cjiwqkc/jw.gd/vendor/autoload_runtime.php')
     (public/index.php:5)