Ruby on Rails - Drag and drop image upload not working

[CptMaumau]

Steps to reproduce

1. Launch Rails server
2. Launch editor
3. Drag and drop image

Expected result

Image successfully uploaded

Actual result

Client side: HTTP error occurred during file upload (404: File not found).

Server side: ActionController::RoutingError (No route matches [POST] "/ckeditor/pictures&responseType=json")

Other details (browser, OS, CKEditor version, installed plugins)

Firefox 39.0.3, Linux Mint 17, CKEditor 4.5.2.

plugins: lineutils,widget,autolink,sharedspace,image2,youtube,confighelper,pastefromword,autogrow,notification,notificationaggregator,filetools,uploadwidget,uploadimage

I think the bug comes from the url used to upload which has an & instead of a ? so Rails fail in interpreting the request.

[Piotrek Koszuliński]

The error that you paste means that your backend does not work (the route does not exist). That's not CKEditor's bug.

[CptMaumau]

But isn't it abnormal to have a url format like that?

Shouldn't it be: /ckeditor/pictures?responseType=json

[Piotrek Koszuliński]

You're right. I missed that. I recall that there's some tricky situation with which config option you use (I guess you used filebrowserUploadUrl or filebrowserImageUploadUrl). I'll pass this to my colleague.

[Piotr Jasiun]

You should use uploadUrl instead of filebrowserUploadUrl. uploadUrl is the proper configuration for image upload. filebrowserUploadUrl is the old configuration for a filebrowser plugin and it adds &responseType=json and is used by image upload only because of the backward compatibility with some file browsers.

I will add a comment to the filebrowserUploadUrl config to make it clear.

[CptMaumau]

Thank you for the response.

I have now another issue, when I try to drag and drop an image on the server side it raises: WARNING: Can't verify CSRF token authenticity

This is due to the request not sending an authenticity_token.

Maybe this is an error from the gem I am using so I will also notify them.

[Piotr Jasiun]

This is a CKEditor bug tracker, not a support channel. The open support channel for CKEditor is ​Stack Overflow. Also note that your question is about the Ruby on Rails plugin, CKEditor do not use any authenticity_token, as far as I know.

[Piotrek Koszuliński]

The implementation of CSRF has of course nothing to do with CKEditor. It needs to be done by the backend. CKEditor, however, perhaps needs to integrate with this too (to use the CSRF) and for that the ​http://docs.ckeditor.com/#!/api/CKEDITOR.editor-event-fileUploadRequest event may be used.

[Piotr Jasiun]

I have updated docs, I have added note to the filebrowserUploadUrl configuration options. I will be available in docs.ckeditor.com after the docs rebuild.