search

gturri / ToXCancel-firefox

GNU General Public License v3.0
1 stars 0 forks source link

Failure to redirect on Waterfox G6.0.20 64-bit for Windows 10 IoT Enterprise LTSC #1

Open ks202005 opened 3 days ago

ks202005 commented 3 days ago

The add-on doesn't work for me, similar to someone who left a review.

Errors from developer console accessed by F12: 

Content-Security-Policy: Ignoring “'unsafe-inline'” within script-src: nonce-source or hash-source specified x.com
Cookie “d_prefs” does not have a proper “SameSite” attribute value. Soon, cookies without the “SameSite” attribute or with an invalid value will be treated as “Lax”. This means that the cookie will no longer be sent in third-party contexts. If your application depends on this cookie being available in such contexts, please add the “SameSite=None“ attribute to it. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite 38b9b706-bcfa-4c2e-8e29-66b7e6752a04:279:38
Content-Security-Policy: The page’s settings blocked the loading of a resource at inline (“script-src”). 2 content.js:68:264
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://api.x.com/1.1/jot/client_event.json. (Reason: CORS request did not succeed). Status code: (null). 2
[GSI_LOGGER]: Your client application uses one of the Google One Tap prompt UI status methods that may stop functioning when FedCM becomes mandatory. Refer to the migration guide to update your code accordingly and opt-in to FedCM to test your changes. Learn more: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment and https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment client:172:419
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://accounts.google.com/gsi/log?client_id=49625052041-kgt0hghf445lmcmhijv46b715m2mpbct.apps.googleusercontent.com&as=IEUbcmY5x7WT596T0R%2BdHQ&event=onetap.card.prompt.cooldown.4. (Reason: CORS request did not succeed). Status code: (null). 2
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://api.x.com/1.1/jot/client_event.json. (Reason: CORS request did not succeed). Status code: (null).
Feature Policy: Skipping unsupported feature name “identity-credentials-get”. client:270:327
Feature Policy: Skipping unsupported feature name “identity-credentials-get”. client:271:303
XHRGET
https://api.x.com/1.1/users/email_phone_info.json
[HTTP/2 403 Forbidden 40ms]

Uncaught (in promise) Error: ApiError: https://api.x.com/1.1/users/email_phone_info.json HTTP-403 codes:[220]
    i https://abs.twimg.com/responsive-web/client-web-legacy/vendor.c1d08f0a.js:107
    r https://abs.twimg.com/responsive-web/client-web-legacy/vendor.c1d08f0a.js:108
    o https://abs.twimg.com/responsive-web/client-web-legacy/vendor.c1d08f0a.js:107
    d https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    o https://abs.twimg.com/responsive-web/client-web-legacy/vendor.c1d08f0a.js:107
    d https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    f https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    errorFilter https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    errorFilter https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    promise callback*errorFilter https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    Hd https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    filters https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    Fd https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    n https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    p https://abs.twimg.com/responsive-web/client-web-legacy/vendor.c1d08f0a.js:108
    C https://abs.twimg.com/responsive-web/client-web-legacy/vendor.c1d08f0a.js:108
    x https://abs.twimg.com/responsive-web/client-web-legacy/vendor.c1d08f0a.js:108
    n https://abs.twimg.com/responsive-web/client-web-legacy/vendor.c1d08f0a.js:107
    u https://abs.twimg.com/responsive-web/client-web-legacy/vendor.c1d08f0a.js:107
    promise callback*n https://abs.twimg.com/responsive-web/client-web-legacy/vendor.c1d08f0a.js:107
    u https://abs.twimg.com/responsive-web/client-web-legacy/vendor.c1d08f0a.js:107
    a https://abs.twimg.com/responsive-web/client-web-legacy/vendor.c1d08f0a.js:107
    a https://abs.twimg.com/responsive-web/client-web-legacy/vendor.c1d08f0a.js:107
    sd https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    Ad https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    rt https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    filters https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    filter https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    jd https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    lt https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    Ld https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    r https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    t https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
    promise callback*t https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js:1
vendor.c1d08f0a.js:107:190837
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://api.x.com/1.1/jot/error_log.json. (Reason: CORS request did not succeed). Status code: (null).
Content-Security-Policy warnings 5
Partitioned cookie or storage access was provided to “https://accounts.google.com/gsi/button?theme=outline&size=large&shape=circle&logo_alignment=center&text=signup_with&width=300&client_id=49625052041-kgt0hghf445lmcmhijv46b715m2mpbct.apps.googleusercontent.com&iframe_id=gsi_230792_844293&as=abPFjQGwmo8Wt5DH0UWZ%2FQ&hl=en” because it is loaded in the third-party context and dynamic state partitioning is enabled.
Source map error: Error: NetworkError when attempting to fetch resource.
Resource URL: https://abs.twimg.com/responsive-web/client-web-legacy/vendor.c1d08f0a.js
Source Map URL: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web-legacy/vendor.c1d08f0a.js.map
Source map error: Error: NetworkError when attempting to fetch resource.
Resource URL: https://abs.twimg.com/responsive-web/client-web-legacy/main.7e6b991a.js
Source Map URL: https://ton.local.twitter.com/responsive-web-internal/sourcemaps/client-web-legacy/main.7e6b991a.js.map
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://api.x.com/1.1/jot/client_event.json. (Reason: CORS request did not succeed). Status code: (null).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://play.google.com/log?format=json&hasfast=true&authuser=0. (Reason: CORS request did not succeed). Status code: (null).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://api.x.com/1.1/jot/ces/p2. (Reason: CORS request did not succeed). Status code: (null).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://api.x.com/1.1/jot/client_event.json. (Reason: CORS request did not succeed). Status code: (null).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://api.x.com/1.1/jot/error_log.json. (Reason: CORS request did not succeed). Status code: (null).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://api.x.com/1.1/jot/client_event.json. (Reason: CORS request did not succeed). Status code: (null).
gturri commented 2 days ago

Thanks a lot for this bug report! 🙏

I was not aware of the existence of Waterfox. I just installed it and gave it a try, and... the plugin works fine on my side in waterfox (6.5.2 64 bits, on Windows 11) 🤔 . I guess I'll have to take the time to look more closely at the logs you posted. I should be able to do that in the next few days.

gturri commented 2 days ago

btw, just to be sure: could it be possible that you ran your browser in "private browsing" mode (in which case it's somewhat expected that the plugin does not work), or do you also observe that the plugin does not work even in "normal" mode?

ks202005 commented 1 day ago

It doesn't work in normal browsing mode or private browsing mode

gturri commented 20 hours ago

Thanks for this information.

Unfortunately I don't understand what is going on: all this log seems unrelated to the plugin. It's as if your browser does not trigger the plugin at all... 🤔

Could you perhaps deactivate your other plugins and try again (to see if it could be an incompatibility issue with some other plugin)?