search

dimdenGD / OldTwitter

Extension to return old Twitter layout from 2015 / 2018.
https://chrome.google.com/webstore/detail/old-twitter-layout-2022/jgejdcdoeeabklepnkdbglgccjpdgpmf
Other
1.76k stars 159 forks source link

"Error initializing security header generator" on Kiwi browser (android) #843

Open jdanny2002 opened 1 month ago

jdanny2002 commented 1 month ago

Describe the bug So i'm getting that error but I don't know what setting should I change on kiwi browser, I have already disabled ublock origin as well as request "Do not track".

Browser Kiwi Browser 124.0.6327.2

Links any twitter.com/ x.com link

OldTwitter version 1.8.5 Screenshot_20240614-005852_Kiwi Browser

Volodesi commented 1 month ago

Getting this as well on Thorium browser for Desktop.

image

lololq0 commented 1 month ago

Getting this as well on Thorium browser for Desktop.

image

Just disable the extension first then login then open the extension again

jdanny2002 commented 1 month ago

Getting this as well on Thorium browser for Desktop. image

Just disable the extension first then login then open the extension again

already tried, as well as deleting cookies. that doesn't work. it keeps saying the same error

lololq0 commented 1 month ago

Weird. That's how I resolved mine.

Volodesi commented 1 month ago

Getting this as well on Thorium browser for Desktop. image

Just disable the extension first then login then open the extension again

Clicking Ok just loads Twitter like normal. So why would I disable it? It just adds an extra step when I want to visit the site.

lololq0 commented 1 month ago

I mean for me it logs out after a long time and that error pops up. Rn I really don't have to do it anymore. I only did it once or twice then yeah.

J6833 commented 1 month ago

I'm getting the same error.

Version 1.8.5

Opera GX LVL5 (core: 109.0.5097.130) Update stream:Early Access System:Windows 11 64-bit Chromium version:123.0.6312.124

J6833 commented 1 month ago

This seems to be an issue with Twitter too? Saw this post from a staff member saying that they're looking into it.

Post: https://devcommunity.x.com/t/there-is-no-request-token-for-this-page-this-is-a-special-key-required-to-verify-that-the-application-uses-your-twitter-account/220914/5

dimdenGD commented 1 month ago

This is unrelated to Twitter. Also you can ignore the message on Kiwi Browser if page loads fine afterwards, not sure why it appears in such cases since it's only meant to appear when page is stuck loading

70624290 commented 1 month ago

tl; dr: firefox and other browsers block the necessary domains for old twitter to work, add abs.twimg.com to the urlclassifier.features.socialtracking.skipURLs key in about:config as a workaround

i think i finally figured out the answer. firefox, along with other privacy-oriented browsers, all seem to use a blocklist which includes twimg.com and every one of its subdomains. for some reason, in firefox it seems like requests made in a non-authoritative context, such as requests made in extensions or webpages, get filtered through a blocklist regardless of the user's preference. at least in firefox, this filtering happens at a level low enough where the request is not even logged in the network tab of the developer tools. this made debugging the error almost impossible since fetch error messages are deliberately made as vague as possible in order to minimize attack vectors.

the only way i managed to get more details was adding a webRequest.onErrorOccurred listener to every request. this way, i managed to figure out that firefox was blocking requests to twimg.com because it was included in a list of social media trackers.

to fix this, i simply abs.twimg.com to the whitelist in the urlclassifier.features.socialtracking.skipURLs key in about:config.

currently not sure how to fix this issue in other browser, but it is almost certainly related to tracking protection features so maybe try disabling them.