I’ve been continually getting “CSRF failed” bugs. For some reason, they don’t show up in Internet Explorer (which I don’t really use), but they persist with both Chrome and Firefox.
Would you be able to look into the bug? It’s really been keeping me from using Memrise, and I want to get back into my review schedules.
Thank you! 
Is this for all your courses? Or for just a particular one? Also, Im going to ask @BeaTrisy to look at this to see what she thinks
ML
Unfortunately, it’s happening with all courses. 
Thanks for looking into this!
@fauxtronic Thanks for the suggestions, but unfortunately, though I went through all the steps in hope the problem existed on my end, the problem persisted.
Here’s what I did:
So unless I missed something obvious, I think it is a bug with the site. 
Can you open the web console in Firefox (F12 hotkey) and scan for red JS errors?
Are you sure you have turned off any activated user scripts or the Tampermonkey addon?
@Thomas.Heiss I have disabled all my addons (see picture), and I don’t recall using any user scripts in my browser.
As for the JavaScript errors, when the “CSRF Failed” message pops up, a warning displays:
Loading mixed (insecure) display content “http://static.memrise.com/uploads/audio/\<filename>.mp3” on a secure page.
See the bottom half of the picture for the warning message.
@Thomas.Heiss Unfortunately, I don’t think that it’s course-related bug. I’ve tried different courses, new, in progress, and complete, and I still get the same error.
For instance, take these three courses as representative, all of which I tried just now, using three different study methods.
New (learn new words): Afrikaans 101 - Basic Phrases (with Audio)
In progress (speed review): Beginners Japanese Grammar 1 (JLPT N5 Grammar)
Complete (classic review): JLPT N5 Vocab
All three of these courses give the same results, whether planting new words or reviewing words.
In testing this, I tried a random new course (Afrikaans), but then after the test didn’t want it. So I clicked “Quit Course” on my home page, then confirmed “Yes”, but the course didn’t remove. So I went to the course page itself, and tried again. (Options → Quit → Yes) This also didn’t work, but instead gave me another “CSRF Failed” message!
I wonder if either the bug is more widespread in the system than just the learning/review sessions, or if the bug might have to do with my account.
The CSRF failed error message means that your browser couldn’t create or access a secure cookie. This can be caused by ad-ons or script blocking plugins.
Could you check if you have the same issue if using Chrome’s incognito mode
To address the issue for a normal Chrome session try manually allowing Memrise cookies.
Let me know how that goes.
Okay, so I’ve got Chrome working, so it looks like it was on my end after all!
However, Firefox is still giving me trouble. Any help with getting that to work?
Have you checked if your Antivirus WebGuard software might be actually blocking downloaded browser JS scripts?
Usually you can see a WebGuard log history when you start the application, clear the errors or disable it temporarily.
What Firefox browser version do you run and on what OS?
I tried Firefox V52.9.0esr yesterday with MartinPen’s DuoLingo Portuguese BR course and actually I was able to successfully start a classic review for the first few words.
When exactly does the error happen?
Right in the beginning, after reviewing several words, etc.? How many?
Have you found a way to reproduce the error in a defined way for classic reviews?
I also do see these “Loading mixed (insecure) display content “http://static.memrise.com/uploads/audio/.mp3” on a secure page.” warnings in the web console; it is not the reason for your CSRF error.
What I encountered yesterday:
Sometimes when browser applications stop working, it sometimes magically helps if you restart the browser so the used memory for the engine, scripts or addons is cleaned up and working again.
I sometimes get a weird “NS_ERROR_OUT_OF_MEMORY” message when I use DuoLingo stories or Tampermonkey, but not with Memrise.
@Thomas.Heiss As far as I can tell, it’s not on the end of the antivirus for two reasons:
I am running Firefox 61.0 on Windows 7 Professional 64-bit.
The error happens every single time that I try to review/learn a word, right when it triggers the “check answer and move on to next word” routine. It doesn’t matter if I use classic or speedy review, etc. It is consistent and repeatable, and makes it very difficult to complete a session, as it is constantly being interrupted by messages which need to be cleared.
Thanks for clarifying the “Loading mixed (insecure) content” warning. I came to that conclusion as well, as the CSRF error also occurs on words that have no associated audio.
Have you tried an upgrade to the latest Firefox V61.0.1 64-bit?
You could also install a parallel copy of 60.1.0esr 64-bit and try (verify) this version.
It may depend on the language course (alphabet, keyboard, etc.), e.g you add 2x Japanese.
Your Afrikaans course test might be enough to validate the issue.
If you do not trust your single further test, do a re-test with this one: https://www.memrise.com/course/359836/duolingo-brazilian-portuguese/
At least this course seems to work for me on Firefox V52.9.0esr (32-bit).
@Thomas.Heiss I tried upgrading to 61.0.1 64-bit just now, but I still have the problem. I actually was running an earlier version of Firefox, which didn’t work, so I upgraded to 61.0 to see if that fixed it, which it didn’t, so I created this thread. But even the latest version (61.0.1) doesn’t work.
I’ve now tried a few Japanese & Afrikaans courses to no avail. I also tried out your suggested course, and sure enough, as soon as I tried to move from the first word to the second, the same error occurred and continued to occur.
Seeing as Chrome is now working, from @BeaTrisy’s suggestions, I’m thinking that something Memrise-related with my Firefox browser needs to be reset, but I don’t know what it is, since I’ve cleared the cache, cookies, etc. Perhaps some sort of permissions need to be granted.
Sounds like your Firefox profile might be corrupted?
If you install new Firefox versions, the same (created) default profile is being used for the same Windows user account.
I think it would be worth it if you tried to create a new profile and start the latest V61.0.1 with the new user profile.
https://support.mozilla.org/en-US/kb/profile-manager-create-and-remove-firefox-profiles
@Thomas.Heiss I believe you’re right; I tried making a new profile, and everything worked without a problem.
I’m not sure what caused the problem with the profile, but at least I can use Memrise now!
Thank you @Thomas.Heiss & @BeaTrisy, and everyone else for your help!
