CSRF_TOKEN in url

Hi Guys,
Getting CSRF_TOKEN syntax injected to my url in Modx Revo 2.2.14 when I click on a clickable image.


Any idea what this is and how to disable?
Thanks

Ubuntu 14.04
PHP Version 5.5.9-1ubuntu4.1
Apache/2.4.7 (Ubuntu)
mysql 5.5.37

What plugins or image-processing snippets are you using?

Hi,
I'm using pthumb which relies on Resizer and PhPThumb. Seems to appear when I have multiple tabs of the same webpage open
Thanks

Just opened the manager in chrome and my url has it too.

Usually, the CSRF_TOKEN is added by some add-on for added security. If you haven't installed a plugin to do it, maybe your host has.

Hi, any ideas what extra may cause it ? I configured the lamp server myself and there's no mod_security or similar involved. It's the first time I've seen it happen on a revo site

Like should I be worried about malicious script in some extra I downloaded or my server being hacked.
My host, Linode got back with:


Hello,

Thank you for contacting Linode Support! While we would be happy to help we don't add any CSRF tokens and we wouldn't know why they are being added to your website. That being said you can read about CSRF at

https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)

Please let us know if you have any questions or need anything else!

.... The content of the link on csrf is conceding.
Any ideas guys?

I wonder if it could be a browser add-on. Have you tried it with other browsers?

If it occurs in all browsers, I'd start disabling plugins one-by-one to see if one of them is doing it.