Upload Failed "Unexpected token 'C' (Cross-site POST form submissions are forbidden)" on macOS Docker #42

New Issue

MrUnknownDE · 2026-04-05T16:16:14+02:00

MrUnknownDE commented

2026-04-05 16:16:14 +02:00

Originally created by @himatech on 2/12/2026

Describe the bug
Attempting to upload a PST file (700MB) or add ingestion sources results in a toast error: Upload Failed, please try again Unexpected token 'C', "Cross-site"... is not valid JSON. This occurs even when bypassing proxies and accessing the container via 127.0.0.1.

To Reproduce
Steps to reproduce the behavior:

Deploy the stack on macOS.
Log in via http://127.0.0.1:3212.
Attempt to upload a 700MB PST file.
The error pops up on the top-right side.

Expected behavior
To accept the PST file for ingestion.

System:

OS: macOS (Apple Silicon)
Docker: Docker Desktop with VirtioFS
Open Archiver Version: 0.4.1
Configuration (docker-compose.yml excerpts):

environment:
  - NODE_ENV=production
  - ORIGIN=http://openarchiver.localhost:3212
  - PROTOCOL_HEADER=x-forwarded-proto
  - HOST_HEADER=x-forwarded-host
  - BODY_SIZE_LIMIT=2000M

Relevant logs:
The logs are not showing any details

Additional context

Attempted Fixes (All failed):
- Setting ORIGIN to match the public URL.
- Setting ORIGIN to match the internal container port (http://localhost:3000).
- Adding TRUSTED_ORIGINS and CORS_ORIGIN variables.
- Setting CHECK_ORIGIN=false.
- Using Incognito mode.

*Originally created by @himatech on 2/12/2026* **Describe the bug** Attempting to upload a PST file (700MB) or add ingestion sources results in a toast error: Upload Failed, please try again Unexpected token 'C', "Cross-site"... is not valid JSON. This occurs even when bypassing proxies and accessing the container via 127.0.0.1. **To Reproduce** Steps to reproduce the behavior: 1. Deploy the stack on macOS. 2. Log in via http://127.0.0.1:3212. 3. Attempt to upload a 700MB PST file. 4. The error pops up on the top-right side. **Expected behavior** To accept the PST file for ingestion. **System:** - OS: macOS (Apple Silicon) - Docker: Docker Desktop with VirtioFS - Open Archiver Version: 0.4.1 - Configuration (docker-compose.yml excerpts): ```YAML environment: - NODE_ENV=production - ORIGIN=http://openarchiver.localhost:3212 - PROTOCOL_HEADER=x-forwarded-proto - HOST_HEADER=x-forwarded-host - BODY_SIZE_LIMIT=2000M ``` **Relevant logs:** The logs are not showing any details **Additional context** - **Attempted Fixes (All failed)**: - Setting ORIGIN to match the public URL. - Setting ORIGIN to match the internal container port (http://localhost:3000). - Adding TRUSTED_ORIGINS and CORS_ORIGIN variables. - Setting CHECK_ORIGIN=false. - Using Incognito mode.

MrUnknownDE added the bug bug bug bug bug bug bug bug bug labels 2026-04-05 16:16:15 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/OpenArchiver#42