Staying on the issue view page for a long time and then input something on comment form and submitting returned error

[lunny]

I guess because the session or the csrf is expired so that when click the submission button, it will return a redirect response. But the Ajax functions haven't catch that and an unrelated error displayed.

I think the best choice is leave this page and follow the redirect?

[silverwind]

Maybe we need to refresh the CSFR token via JS in both window.config and all active <form>s shortly before expiry. I guess a simple setTimeout on page load shall do.

[silverwind]

If we are expiring crsf token, we shouldn't. E.g. only expire them at the end of the session.