mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-07-16 05:33:49 +03:00
Can't upload image/files - 403 response #5252
Closed
opened 2026-02-05 09:51:29 +03:00 by OVERLORD
·
6 comments
No Branch/Tag Specified
development
l10n_development
release
snyk-action
ci_and_static
mfa_key
phpstan_june26
MilnerMart/development
GamerClassN7/impersonations-for-admin
Zhey-on/feature/csp-image-css-controls-6033
tortillas5/development
llm_only
vectors
McTom234/oidc-key-algorithms
captcha_example
v26.05.2
v26.05.1
v26.05
v26.03.5
v26.03.4
v26.03.3
v26.03.2
v26.03.1
v26.03
v25.12.9
v25.12.8
v25.12.7
v25.12.6
v25.12.5
v25.12.4
v25.12.3
v25.12.2
v25.12.1
v25.12
v25.11.6
v25.11.5
v25.11.4
v24.11.4
v25.11.3
v25.11.2
v25.11.1
v25.11
v25.07.3
v25.07.2
v25.07.1
v25.07
v25.05.2
v25.05.1
v25.05
v25.02.5
v25.02.4
v25.02.3
v25.02.2
v25.02.1
v25.02
v24.12.1
v24.12
v24.10.3
v24.10.2
v24.10.1
v24.10
v24.05.4
v24.05.3
v24.05.2
v24.05.1
v24.05
v24.02.3
v24.02.2
v24.02.1
v24.02
v23.12.3
v23.12.2
v23.12.1
v23.12
v23.10.4
v23.10.3
v23.10.2
v23.10.1
v23.10
v23.08.3
v23.08.2
v23.08.1
v23.08
v23.06.2
v23.06.1
v23.06
v23.05.2
v23.05.1
v23.05
v23.02.3
v23.02.2
v23.02.1
v23.02
v23.01.1
v23.01
v22.11.1
v22.11
v22.10.2
v22.10.1
v22.10
v22.09.1
v22.09
v22.07.3
v22.07.2
v22.07.1
v22.07
v22.06.2
v22.06.1
v22.06
v22.04.2
v22.04.1
v22.04
v22.03.1
v22.03
v22.02.3
v22.02.2
v22.02.1
v22.02
v21.12.5
v21.12.4
v21.12.3
v21.12.2
v21.12.1
v21.12
v21.11.3
v21.11.2
v21.11.1
v21.11
v21.10.3
v21.10.2
v21.10.1
v21.10
v21.08.6
v21.08.5
v21.08.4
v21.08.3
v21.08.2
v21.08.1
v21.08
v21.05.4
v21.05.3
v21.05.2
v21.05.1
v21.05
v21.04.6
v21.04.5
v21.04.4
v21.04.3
v21.04.2
v21.04.1
v21.04
v0.31.8
v0.31.7
v0.31.6
v0.31.5
v0.31.4
v0.31.3
v0.31.2
v0.31.1
v0.31.0
v0.30.7
v0.30.6
v0.30.5
v0.30.4
v0.30.3
v0.30.2
v0.30.1
v0.30.0
v0.29.3
v0.29.2
v0.29.1
v0.29.0
v0.28.3
v0.28.2
v0.28.1
v0.28.0
v0.27.5
v0.27.4
v0.27.3
v0.27.2
v0.27.1
v0.27
v0.26.4
v0.26.3
v0.26.2
v0.26.1
v0.26.0
v0.25.5
v0.25.4
v0.25.3
v0.25.2
v0.25.1
v0.25.0
v0.24.3
v0.24.2
v0.24.1
v0.24.0
v0.23.2
v0.23.1
v0.23.0
v0.22.0
v0.21.0
v0.20.3
v0.20.2
v0.20.1
v0.20.0
v0.19.0
v0.18.5
v0.18.4
v0.18.3
v0.18.2
v0.18.1
v0.18.0
v0.17.4
v0.17.3
v0.17.2
v0.17.1
v0.17.0
v0.16.3
v0.16.2
v0.16.1
v0.16.0
v0.15.3
v0.15.2
v0.15.1
v0.15.0
v0.14.3
v0.14.2
v0.14.1
v0.14.0
v0.13.1
v0.13.0
v0.12.2
v0.12.1
v0.12.0
v0.11.2
v0.11.1
v0.11.0
v0.10.0
v0.9.3
v0.9.2
v0.9.1
v0.9.0
v0.8.2
v0.8.1
v0.8.0
v0.7.6
v0.7.5
v0.7.4
v0.7.3
0.7.2
v.0.7.1
v0.7.0
v0.6.3
v0.6.2
v0.6.1
v0.6.0
v0.5.0
Labels
Clear labels
🎨 Design
📖 Docs Update
🐛 Bug
🐛 Bug
:cat2:🐈 Possible duplicate
💿 Database
☕ Open to discussion
💻 Front-End
🐕 Support
🚪 Authentication
🌍 Translations
🔌 API Task
🏭 Back-End
⛲ Upstream
🔨 Feature Request
🛠️ Enhancement
🛠️ Enhancement
🛠️ Enhancement
❤️ Happy feedback
🔒 Security
🔍 Pending Validation
💆 UX
📝 WYSIWYG Editor
🌔 Out of scope
🔩 API Request
:octocat: Admin/Meta
🖌️ View Customization
❓ Question
🚀 Priority
🛡️ Blocked
🚚 Export System
♿ A11y
🔧 Maintenance
> Markdown Editor
pull-request
Mirrored from GitHub Pull Request
No Label
🐕 Support
Milestone
No items
No Milestone
Projects
Clear projects
No project
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: starred/BookStack#5252
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Pretender2064 on GitHub (Apr 7, 2025).
Attempted Debugging
Searched GitHub Issues
Describe the Scenario
I have Bookstack installed through the Linuxserver.io docker image.
I have a user who tried to upload images to a page and keeps getting an error code which appears to be some HTML code, but doesn't display anything when I put it into a HTML file. Screenshot below:
I found that this was a 403 error from the post request, I then checked the permissions of the volume on the host system and folders inside the docker container and both shouldn't have caused any issues. To eliminate one thing, I tried doing chmod 777 on the folders, but this did not solve the issue.
I tried looking at the larvel.log file, but it has not been written to for about a month. This could be related?
However, the nginx access logs are updated with each action as expected.
I tried enabling app_debug, but this didn't do anything as far as I can see and also did not start logging in any log files.
As I don't have any errors in the log file to investigate, I'm at a loss on what could be causing this.
Exact BookStack Version
25.02
Log Content
Nothing is written to the log file as described above.
Hosting Environment
Docker 28.0.1 running on Ubuntu 24.04.2 LTS.
Cloudflare tunnel running for reverse proxy.
Other containers running on the server aren't affected by this issue.
@ssddanbrown commented on GitHub (Apr 7, 2025):
Hi @Pretender2064,
If possible, it would be good if you could share that HTML code, as that could help indicate which layer is returning the response.
@Pretender2064 commented on GitHub (Apr 8, 2025):
Thanks for getting back to me so quickly @ssddanbrown!
I'm also unable to upload photos and documents (as the admin user if that makes a difference).
No, the nginx access logs don't have any 403s, only 200s and 302s.
These are the nginx logs on the bookstack image. I haven't added anything other than the Cloudflare tunnel for access.
HTML error attached here (as a txt file): BookstackError.txt
@ssddanbrown commented on GitHub (Apr 8, 2025):
Thanks for the info @Pretender2064,
Based on the provided HTML, I'm fairly confident that's a Cloudflare challenge (Used to prevent bots & limit attacks etc...).
Therefore I don't think these requests are reaching BookStack at all, but getting blocked by cloudflare along the way.
I'm not really sure why Cloudflare is blocking these.
It might be worth checking in cloudflare for any logs which report events to see if they provide any clues.
Otherwise, if Cloudflare provides levels of security control for the tunnel, it might be worth temporarily turning down security controls to see if that helps.
@Pretender2064 commented on GitHub (Apr 8, 2025):
That is it! Thanks for the help.
I have a few similar errors on my cloudflare logs:
ERR Request failed error="Unable to reach the origin service. The service may be down or it may not be responding to traffic from cloudflared: read tcp 127.0.0.1:42604->127.0.0.1:6875: read: connection reset by peer"Now just need to figure out why. Thank you again!
@ssddanbrown commented on GitHub (Apr 8, 2025):
Just to help you avoid getting side-tracked, I'd think that specific error message would be unrelated to the user image issue.
That log message probably from connection breaks/resets, which I'd expect to present differently (as an error), not as a user challenge.
@Pretender2064 commented on GitHub (Apr 8, 2025):
Perfect - that is very useful. I'm just looking into the connection settings now.
Thanks for all your help. I'll close this now as it isn't a bookstack issue.