search

gorhill / uMatrix

uMatrix: Point and click matrix to filter net requests according to source, destination and type
GNU General Public License v3.0
4.56k stars 470 forks source link

uMatrix breaks Google twofactor authentification even if deactivated #833

Closed Nanority closed 6 years ago

Nanority commented 6 years ago

Hello!

I am using uMatrix 1.1.10 on Firefox 57 and encounter complications to log into my Google account using its two-factor authentication with my cellphone. The corresponding Google tools report a timeout (see screenshot). The problem occurs regardless of me allowing all scripts and even if uMatrix is deactivated by its internal switch. The login is only working if I disable uMatrix in the Add-ons menu of Firefox.

Just to clarify: my usual login-procedure requires to confirm a notification on my cellphone to proceed with the login.

I would be glad if the problem could be fixed.

Regrads, Nanortity

screenshot

gorhill commented 6 years ago

Did you look at the logger? You still have a switch on in the per-site switch. I will be closing because as asked in CONTRIBUTING, you are not making the case the issue is with uMatrix, otherwise you would have made the case the logger does not report anything blocked. Re-open when you make a better case.

Remu-rin commented 6 years ago

Your screen shows you have one of per-scope switches enabled for that page. Try disabling it. https://github.com/gorhill/uMatrix/wiki/Per-scope-switches Disabling the matrix only disables filtering, not other features.

gorhill commented 6 years ago

Using the logger is really key here. I had a case myself where I had mistakenly enabled matrix filtering in the behind-the-scene scope and this was causing cookies to be unduly blocked as a result (I block cookie globally in uMatrix), and I was unable to log in into Twitter until eventually I saw the cookies blocked in the logger (the ability to see what specific rule caused something to be blocked/deleted is sorely missing in the logger, hopefully I will find the time to address this eventually).

bjoe2k4 commented 6 years ago

referrer-spoof: google.com false does the job with Google 2FA. (in combination with a few script and cookie allows)