CSRF Token error when adding 1000+ users to a group

Description

When adding 1000+ users to a group, I got this error:

Fatal error: Uncaught FusionDirectoryException: CSRF protection token missing in /usr/share/fusiondirectory/include/class_CSRFProtection.inc:29 Stack trace: #0 /usr/share/fusiondirectory/html/main.php(59): CSRFProtection::check() #1 {main} thrown in /usr/share/fusiondirectory/include/class_CSRFProtection.inc on line 29

Distribution Name and Version

Debian 10

FusionDirectory Version

1.3.1

PHP version used

7.3.27

Origin of php packages

Distribution packages

Steps to Reproduce

1. Create a group
2. Add 1000+ members

Expected behavior: Members should be added to the group

Actual behavior: PHP Fatal Error

Reproduces how often: 100% of time

Additional Information

None.

moved from fd#6168 (closed)

assigned to @bmortier

This is similar to fd#6000 (closed) probably and related to max_input_vars being reached.

If I understand correctly this is only possible if you modify the size limit to over a 1000. Maybe we should forbid having a search limit higher than the configured max_input_vars ? Or at least show a warning about it.

added 5m of time spent

moved to fd#6169 (closed)