search

gorhill / httpswitchboard

Point & click to forbid/allow any class of requests made by your browser. Use it to block scripts, iframes, ads, facebook, etc.
GNU General Public License v3.0
1.33k stars 83 forks source link

Some login breaks #356

Closed mikhaelkh closed 9 years ago

mikhaelkh commented 10 years ago

When I open https://www.inoreader.com/ for the first time, site shows me login page. When I press F5 it logs me in and shows feeds. I've enabled temporary auto-whitelisting. This problem has a workaround: you must save temporary changes.

gorhill commented 10 years ago

Err.. What mode are you working in, block-all by default? What request type are generically blacklisted? Frames? What did you whitelist? Are cookies blocked? Are session cookies set to be deleted? After how long? Etc.

It is by design that things break when you block stuff in HTTPSB (as opposed to an ad blocker).

When things are blocked, you have to find out what need to be further whitelisted -- this is up to the user to figure this, I can't be of any help if I don't know what is whitelisted/blacklisted in your matrix, and then know which requests were blocked (through the request log) to find out the one which is needed.

I don't have an account with this site, but I tried to login with random words, and it does appear you may need to whitelist subtome.com, including frame for subtome.com. Just look at what requests were blocked, find out which one is needed, then whitelist the relevant cell, persist changes.

mikhaelkh commented 10 years ago

@gorhill Block-all by default, temporary auto-whitelisting enabled, frame blacklisted; css,img whitelisted, cookies blocked, session cookies are set to be deleted after 60 minutes. Is there any confidential data in settings file, maybe I can attach it? Yes, I got the idea how to use this exllent extension thanks to wiki page, but the behaviour is weird. How can I reset settings for current site?

gorhill commented 10 years ago

I noticed that a frame is requested for subtome.com, so it may be required for proper login. I know that this is also how Google login works, need to allow frame for youtube.com (for example).

To remove the settings for a specific scope, go into "Scope rules" tab in the dashboard, find the scope which you want to reset, and delete it by clicking on it and then the "Commit" button.

mikhaelkh commented 10 years ago

@gorhill, maybe I forgot to add the sequence of actions and details to reproduce it: clear all cookies on https://www.inoreader.com/, log in via username/password, reopen browser and go to the site again. I also have https://chrome.google.com/webstore/detail/vanilla-cookie-manager/gieohaicffldbmiilohhggbidhephnjj installed before yours and configured to "Protect whitelisted cookies" and www.inoreader.com is in whitelist. Chromium set to "Keep local data only until I quit my browser".

mikhaelkh commented 9 years ago

dead project