The CSRF failure on /import/upload used one generic message. It now tells apart an empty upload, a missing token, and a session mismatch. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Powered by TurnKey Linux.