The token revoke form has a field named action for the server-side operation. In some browsers that field shadows the form's URL property, which sent AJAX requests to /[object HTMLInputElement] and prevented them from reaching the application. Revocation now uses the form's actual action attribute or the current page URL.
Repository token revocation reaches the correct endpoint
Revoking a repository token no longer sends the request to an invalid URL caused by the form action field.