disable the “Improve protection against cross-side request forgery attacks” option (Control Panel>DSM Settings>Security Tab) and logout and log back in again, it makes config file editor work again