search

april / laboratory

Because good website security shouldn't only be available to mad scientists!
https://addons.mozilla.org/en-US/firefox/addon/laboratory-by-mozilla/
Mozilla Public License 2.0
174 stars 13 forks source link

Latest version is not recording CSP policies at all #24

Open injcristianrojas opened 4 years ago

injcristianrojas commented 4 years ago

"Record this site" functionality is not working. It stays in default-src 'none' after enabling it. Extension version: 3.0.7 Browser version: 73.0.1 (64-bit) Linux

april commented 4 years ago

Can you give me any other information? I just tested it with 3.0.7, and it seems to be recording fine for me.

injcristianrojas commented 4 years ago

I'm trying to do a CSP over localhost:4200 (I'm using it on an Angular SPA). Does it blacklist capturing localhost traffic?

april commented 4 years ago

Hmm, I guess I dunno. I've never tested it with localhost; it's possible that Firefox doesn't let me snoop on other localhost.

Does it record for other, non-localhost sites?

injcristianrojas commented 4 years ago

Yes it does. Some localhost restriction by Firefox, perhaps?

jarvars commented 3 years ago

I confirm the issue in firefox 87.0 with extension 3.0.8, for sites deployed on localhost, for other sites is ok.

april commented 3 years ago

Do you see any errors in the console when you're recording?

Ricky-Tigg commented 3 years ago

OS: Linux 5.11.15-300.fc34.x86_64; Firefox version: 88.0 for Fedora; Enterprise Policies: Inactive; Extension version, release date: 3.0.8, April 29, 2021; Site applied to: https://www.csc.fi/

Issue confirmed.

Ascl3pi0s commented 2 years ago

I am experiencing a similar issue whenever the port is specified in the url, the "Record this site" options doesn't work.

e.g. https://somesiteurl:8443 it will not record, but https://othersiteurl everything works correctly.

I'm not sure if this is relevant info, but it is the only pattern that replicate the issue on my end.

I'm using:

Laboratory version 3.0.8 Firefox 92.0.1 Windows 10