bitwarden / clients

Bitwarden client apps (web, browser extension, desktop, and cli).
https://bitwarden.com
Other
8.7k stars 1.14k forks source link

Bitwarden extension for Safari blocks or makes Cloudflare Turnstile fail constantly #9721

Open mackonsti opened 3 weeks ago

mackonsti commented 3 weeks ago

Steps To Reproduce

  1. Go to Mac App Store and download Bitwarden, mine is Version 2024.6.0 (25275)
  2. Launch Safari Version 17.5 (18618.2.12.111.5, 18618) on MacOS Ventura 13.6.7.
  3. Make sure the Bitwarden Safari extension is enabled (no need on Incognito websites but won't change anything)
  4. No other extensions are active, to isolate the issue.
  5. Drop a visit to any Cloudflare-protected website e.g. their Dashboard: https://dash.cloudflare.com/login
  6. Check the behaviour: You will constantly get the validation animation and never resolve that CAPTCHA thing.
  7. Now disable Bitwarden extension, refresh the page: Cloudflare Turnstile works...

Expected Result

Resolving the Turnstile CAPTCHA graphic on Cloudflare-supported sites, should work.

Actual Result

Resolving the Turnstile CAPTCHA graphic on Cloudflare-supported sites, fails. Error appears briefly and restarts contsantlly.

Screenshots or Videos

Failure

Additional Context

[Warning] [Cloudflare Turnstile] Error: 106010. (b3dd9dc498acb045c611.js, line 43)
[Error] TypeError: globalThis.requestIdleCallback is not a function. (In 'globalThis.requestIdleCallback(this.processMutations, { timeout: 500 })', 'globalThis.requestIdleCallback' is undefined)
    (anonymous function) (bootstrap-autofill-overlay.js:4273)
[Error] Blocked a frame with origin "https://challenges.cloudflare.com" from accessing a frame with origin "https://dash.cloudflare.com". Protocols, domains, and ports must match.

See some more in the log attached but it is a repeated error: Safari Console Error.log

P.S. Changing the user-agent of the browser, as found in some Reddit forums, did not change the issue outcome, still an error.

Operating System

macOS

Operating System Version

13.6.7

Web Browser

Safari

Browser Version

Version 17.5 (18618.2.12.111.5, 18618)

Build Version

2024.6.0 (25275)

Issue Tracking Info

Write commented 3 weeks ago

Can confirm, same issue here.

Grinchii commented 2 weeks ago

Same with me.

Greenderella commented 2 weeks ago

Hi there,

Thank you for checking up on this. Yes, this matter has been reported, and the Engineering team is working on a fix (https://github.com/bitwarden/clients/pull/9643).

I am unable to provide an ETA for a fix, but I would expect to see this introduced very soon.

If you wish to add any further information/screenshots/recordings etc., please feel free to do so at any time - our engineering team will be happy to review these.

Thanks once again!

thekendog commented 2 weeks ago

I thought I was going crazy. I just recently switched to Safari and was having issues with this. And yup, after seeing this thread I disabled Bitwarden and everything worked properly again. It's not only the Turnstile, it's any managed challenge screen.

thekendog commented 2 weeks ago

FYI, it also messes up phpMyAdmin pages. The pages completely freeze up and nothing can be clicked.

pmhausen commented 2 weeks ago

I just found this via search engine - the issue is also present with the login of TrueNAS SCALE and Safari. Was driving me nuts. An endless stream of TypeError: globalThis.requestIdleCallback is not a function errors. Thanks to everyone looking into this.

warnerchad commented 2 weeks ago

I've been having the same issue and have tried many troubleshooting steps. I finally found that disabling the Bitwarden Safari extension allows Cloudflare verification to succeed. Enabling the Bitwarden extension brings the problem back.

daltonrooney commented 2 weeks ago

As a temporary workaround, you can also disable Bitwarden just for the Cloudflare dashboard.

Safari -> Settings -> Websites, scroll down the panel on the left to Extensions -> Bitwarden Password Manager, then scroll through the list of currently open websites until you find "dash.cloudflare.com" and choose "deny".

mackonsti commented 1 week ago

Thanks for the tip @daltonrooney but some sites check "if you are a human" via similar APIs and fail, too... you know, when visiting a website there's some pre-check done.

Nevertheless, seems with latest Bitwarden update on Mac App Store 2023.6.3 the issue is resolved on Safari, please update and confirm everyone?

mmcarvalho commented 1 week ago

@Greenderella actually it also affects firefox, although a bit differently: sometimes it takes forever for the turnstile to load (working or not), other the turnstile disappears, other it just does not finish loading at all.

warnerchad commented 1 week ago

Updating to 2023.6.3 fixed this on Safari for me. Thanks!

demyxco commented 1 week ago

The fix is confirmed, thank you for the prompt release!