[SOLVED] Roundcube works with IE and incognito Chrome, fails partly with Chrome

[jyrkipes]

Server:
-debian sid
-Roundcube Webmail 1.1.4

Client:
-win7
-IE11
-Chrome 48.0.2564.97 32-bit

as subject states: with IE all works, if Chrome in incognito => works, standard Chrome (with cache cleared) fails as follows:

-login, click one of the emails once, click delete-icon

/var/log/roundcube/errors states:

Code Select Expand

[04-Feb-2016 16:36:26 +0200]: <07539npa> PHP Error: Request security check failed (POST /rc/?_task=mail&_action=move?_task=&_action=)

Chrome javascript debug says:

Code Select Expand


POST http://jyge.no-ip.org/rc/?_task=mail&_action=refresh 403 (Forbidden)
        send @ dca.js?pid=39266&cid=49544_893_:3
        na.extend.ajax @ dca.js?pid=39266&cid=49544_893_:3
        http_post @ app.min.js?s=1451370131:1refresh @ app.min.js?s=1451370131:1
        (anonymous function) @ app.min.js?s=1451370131:1
        ui.min.js?s=1451370111:1 Uncaught TypeError: q.messagedialog.html(...).dialog is not a functionF @ ui.min.js?s=1451370111:1
        rcube_event_engine.triggerEvent @ common.min.js?s=1451370150:1
        display_message @ app.min.js?s=1451370131:1
        http_error @ app.min.js?s=1451370131:1
        $.ajax.error @ app.min.js?s=1451370131:1
        j @ dca.js?pid=39266&cid=49544_893_:2
       k.fireWith @ dca.js?pid=39266&cid=49544_893_:2
       d @ dca.js?pid=39266&cid=49544_893_:3
       c @ dca.js?pid=39266&cid=49544_893_:3

Uncaught TypeError: q.messagedialog.html(...).dialog is not a function
       F @ ui.min.js?s=1451370111:1
       rcube_event_engine.triggerEvent @ common.min.js?s=1451370150:1
       display_message @ app.min.js?s=1451370131:1
       http_error @ app.min.js?s=1451370131:1
       $.ajax.error @ app.min.js?s=1451370131:1
       j @ dca.js?pid=39266&cid=49544_893_:2
       k.fireWith @ dca.js?pid=39266&cid=49544_893_:2
       d @ dca.js?pid=39266&cid=49544_893_:3
       c @ dca.js?pid=39266&cid=49544_893_:3
       app.min.js?s=1451370131:1 HTTP POST: ./?_task=mail&_action=move



While incognito, no failure to log or javascript debug.

Done two days of googling but nothing that pinpoints solution.
Some refers to legacy_browsers (tried it, didn't help) http://www.roundcubeforum.net/index.php?topic=22278.0
Some hint it could be CSRF (whatever it is..) https://github.com/alexandregz/twofactor_gauthenticator/issues/24
Maybe closest is this closed thread: https://support.mayfirst.org/ticket/10769

Anyway, so far no solution.
Apparently something was changed as this came up after some of the last apt-get update, unfortunately not sure which one.

SOLVED. It was Chrome extension called AS Magic Player. Removing it and it works again.

[jyrkipes]

Similar behaviour with:
-move email
-compose new email and try to send (skips spelling check), never sends
-does not refresh automatically new emails to the list
-if delete one, it disappears from list but not from folder counter. If click to another folder and click back to this folder, deleted email shows up like it never deleted
-double click email to view it, click Show Headers => opens empty textbox and gives failure to log&javascript

There may be other but I'm a bit hesitant to go and test 'em all while this is broken.

Hints are appreciated

[SKaero]

If its working fine with incognito mode my first though is some sort of conflict with Chrome extensions.

[jyrkipes]

Thank You & Hooray!

It was AS Magic Player, virus if u ask me...

http://www.lavasoft.com/mylavasoft/company/blog/how-to-remove-as-magic-player

Consider this "SOLVED"