FusionAuth / fusionauth-issues

FusionAuth issue submission project
https://fusionauth.io
91 stars 12 forks source link

View dialogs may be blocked by ad blockers or Brave browser #961

Open robotdan opened 4 years ago

robotdan commented 4 years ago

View dialogs may be blocked by ad blockers or Brave browser

Description

Some AJAX dialogs in FusionAuth may be blocked by ad blocker plugins, or the brave browser.

Brave reports:

Cross-site trackers blocked

https://example.fusionauth.io/ajax/system/event-log/view/7

Blocked

Works

Cause

The AJAX URL /ajax/system/event-log/view/7 is causing this to be blocked due to the word event-log.

Solutions

  1. Tell users to disable ad block on FusionAuth
  2. Change our path to something like: /ajax/system/el/view/7
  3. Enumerate all AJAX paths and drop a cookie or something like that and then have prime.js replace the path with the enumerated path in the cookie before making the ajax request. Then have prime map it back in the action mapper.
  4. Similar to the previous idea, but base64 (URL encoding w/out padding) encode the path segments and then have prime-mvc decode them based some configuration such as the presence of a config in package-info.java.
  5. Others?
robotdan commented 2 years ago

This seems to work on a current version of Brave. Perhaps no longer an issue.

Version 1.43.93 Chromium: 105.0.5195.127 (Official Build) (arm64) (https://brave.com/latest/)