search

jitsi / jitsi-meet

Jitsi Meet - Secure, Simple and Scalable Video Conferences that you use as a standalone app or embed in your web application.
https://jitsi.org/meet
Apache License 2.0
22.89k stars 6.69k forks source link

400 Bad Request - Request Header or Cookie too large - on public meet.jit.si instance #8380

Closed jeffbski closed 3 years ago

jeffbski commented 3 years ago

Description:

In certain circumstances when you try to join a meeting, you get a white error page with 400 Bad Request - Request Header or Cookie too large. This is occurring on the public instance https://meet.jit.si

After looking at the network console, I can see that the Cookie header has grown substantially and is likely the problem.

This is a terrible error for an end user since they have no idea how to recover, refreshing the page does nothing to fix it. You can fix it by clearing your cookies, but this is not an ideal work around.

Maybe Jitsi needs to monitor the cookie size and be sure to delete old cookies or make sure that the size doesn't get too large. There is an excessive number of amp_cookie_test and _tldtest cookies that are likely not being cleaned up and causing the problem. I have included the raw cookie header as well as screenshots of the parsed cookies from chrome tools.

Alternatively this error could be somehow handled by redirecting to a page that runs some cleanup on the cookies before redirecting back to the original page.

Steps to reproduce:

It is not clear what can cause this. I've seen it happen for seemingly no particular reason. The most recent situation happened when I accidentally ended my call while still sharing a youtube URL (though I don't know that this was a contributing factor).

  1. Navigate to a https://meet.jit.si/roomNameHere

Expected behavior:

Error should not occur, cookie header size should be being cleaned up so that it doesn't exceed max. Clean up amp_cookie_test and _tldtest or reuse them better as to not exceed the max.

Actual behavior:

400 Bad Request Error page - Request Header or Cookie too large

Browser screenshot

Screen Shot 2021-01-11 at 10 06 29 AM

Server information:

Public meet.jit.si instance on Jan 10th, 2021

Client information:

Additional information:

Cookie list page 1 Screen Shot 2021-01-11 at 11 46 10 AM

Cookie list page 2 Screen Shot 2021-01-11 at 11 46 28 AM

Cookie list page 3 Screen Shot 2021-01-11 at 11 46 50 AM

HTTP Request and Headers (room name was changed, but otherwise rest is actual data):

GET /myRoomHere HTTP/1.1 Host: meet.jit.si Connection: keep-alive Pragma: no-cache Cache-Control: no-cache sec-ch-ua: "Google Chrome";v="87", "\"Not;A\Brand";v="99", "Chromium";v="87" sec-ch-ua-mobile: ?1 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Mobile Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: amp_cookie_testGNafy8ESDao623BoSu_jvj=Sat Dec 05 2020 07:00:55 GMT-0600 (Central Standard Time); _tldtest_FmBW7Lj20Le-vkOhXqYZKU=1; _tldtest_RJzDMduFpg5hvZu06KnQHW=1; amp_cookie_testfBwC2WsjPX4OqqR9Ey8hZd=Sat Dec 05 2020 07:00:55 GMT-0600 (Central Standard Time); amp_cookie_testhkRr4gEBXKsNmM2582f50d=Sat Dec 05 2020 07:01:06 GMT-0600 (Central Standard Time); _tldtest_rb3GHf23MHC092r34g3X27=1; _tldtest_hhnjtGxw3WH4-8jRVC0yKM=1; amp_cookie_testuRpXvmzgqzjmyqsF5rV4bq=Sat Dec 05 2020 07:01:06 GMT-0600 (Central Standard Time); amp_cookie_test-K56ZwaMObduJFVWlc2UtF=Sat Dec 05 2020 08:26:26 GMT-0600 (Central Standard Time); _tldtest_mshsSwQbdelMVebZL27dj1=1; _tldtest_FM8rWzmBD0zdYXmLAbHcke=1; amp_cookie_testi9Mn_sNCgI2g5fPE-FYdaQ=Sat Dec 05 2020 08:26:26 GMT-0600 (Central Standard Time); amp_cookie_testPcDwWBhhikDn-LTb2xGp7u=Sun Dec 06 2020 14:58:46 GMT-0600 (Central Standard Time); _tldtest_7tgSgLAJFwVa2sWG1V0Ra4=1; _tldtest_VhDmjorybPTzfsxxvL3Jwf=1; amp_cookie_testW-Trvl7p0OPQiXk--EGj4i=Sun Dec 06 2020 14:58:46 GMT-0600 (Central Standard Time); amp_cookie_testNxIgoeM3EfUrRI7Ay7C6Qw=Sun Dec 06 2020 16:15:10 GMT-0600 (Central Standard Time); tldtest-1oUI4gCxcd3ya75mJMKDi=1; _tldtest_Y1siMBtfpRwhm41NntckCM=1; amp_cookie_testi4Xx_bA3K3K3LF9AaU04Yl=Sun Dec 06 2020 16:15:10 GMT-0600 (Central Standard Time); amp_cookie_test64gXBTWDuaDx3cfP4rLSnb=Wed Dec 09 2020 18:49:29 GMT-0600 (Central Standard Time); _tldtest_byrcnEUotUtLQATPZCIJ4P=1; _tldtest_IAd2EOPjR_vh9pA3fM7rFu=1; amp_cookie_testmRww9Z9IwmY1caHjz9OYrK=Wed Dec 09 2020 18:49:29 GMT-0600 (Central Standard Time); amp_cookie_test6vj0dvHQCzX__3rHVFvgHb=Wed Dec 09 2020 19:56:29 GMT-0600 (Central Standard Time); _tldtest_xg9ccs9o7WxMgVYvF3h1L5=1; _tldtest_q_ybXmPDZrLxDkFh0UJ-Uz=1; amp_cookie_testQVTdYLpxweHY1Rj1C-a94d=Wed Dec 09 2020 19:56:29 GMT-0600 (Central Standard Time); amp_cookie_test_e_KmF93indV2HYbrKUyAN=Sat Dec 12 2020 06:59:20 GMT-0600 (Central Standard Time); _tldtest_af6TD_2xHjF5RHo6P5Ve5f=1; _tldtest_YjuJt5cUlr-vQkVGBO8pD9=1; amp_cookie_testexwbLUK8XEQU2Wrt8GzK=Sat Dec 12 2020 06:59:20 GMT-0600 (Central Standard Time); amp_cookie_testXuoqR8qeuPxrJd2xEuvgeJ=Sat Dec 12 2020 08:29:23 GMT-0600 (Central Standard Time); _tldtestgfmBrVmD5rF8TkxtXHyjF=1; _tldtest_PxB6omnkrHOntjKkR8YD5J=1; amp_cookie_test2uvuDpVnypzAY9olxvDSlg=Sat Dec 12 2020 08:29:23 GMT-0600 (Central Standard Time); amp_cookie_testENAKyJa06FPWs4SwQfZFpJ=Sun Dec 13 2020 14:59:32 GMT-0600 (Central Standard Time); _tldtest_5uQFCZprRR6k34XuoVnFo8=1; _tldtest_FisorcCPp-6Xz-AxbR5x2O=1; amp_cookie_testBm-J9_xrzhmStUJDLgySBU=Sun Dec 13 2020 14:59:32 GMT-0600 (Central Standard Time); amp_cookie_testTXdITkpKrrgrDgv9U_UaKL=Sun Dec 13 2020 16:19:56 GMT-0600 (Central Standard Time); _tldtest_K9mbyhUYOyxZ1HYkpdUawK=1; _tldtest_q6HDTHQHaKL2fvwm93fRZD=1; amp_cookie_testTVw0uKPAuLWSpoJaCwuG0q=Sun Dec 13 2020 16:19:56 GMT-0600 (Central Standard Time); amp_cookie_test6Xx4CqvbNU4l3LkafKML1a=Mon Dec 14 2020 15:26:56 GMT-0600 (Central Standard Time); _tldtest_Rx-zyuA-VYFBdetxGiOIFL=1; _tldtest_cMm5oqxi9pmLv1u26mmYCQ=1; amp_cookietestzPfEoc3LRuHihKYvDOGGI=Mon Dec 14 2020 15:26:56 GMT-0600 (Central Standard Time); amp_cookie_testQpzTkgFHHZGh1qbnlvOMFO=Mon Dec 14 2020 16:12:09 GMT-0600 (Central Standard Time); tldtest-6LpMGH-eqs6c5rt6Ca9UI=1; _tldtest_48vNbyBCM-h9R1Zy3pfgg5=1; amp_cookie_testBJ_kj9WhlrY581Ctj43OvZ=Mon Dec 14 2020 16:12:09 GMT-0600 (Central Standard Time); amp_cookie_test3U0qCq1wBqotxYhoKm9lnP=Mon Dec 14 2020 16:20:29 GMT-0600 (Central Standard Time); _tldtest_50wq1Ey2iiY_9H4g4AQreW=1; _tldtest_N2oCS6Ki8WDCqBpTWJyvJ3=1; amp_cookie_testut2vvtIz-Tn_kSCZMV8fQp=Mon Dec 14 2020 16:20:29 GMT-0600 (Central Standard Time); amp_cookie_testja9YrHrsycnZXwNeaM6_uS=Thu Dec 17 2020 20:31:01 GMT-0600 (Central Standard Time); _tldtest_n-iwkzezQny2oLOgc9nB4Z=1; _tldtest_DNuQ8nfJTQUr52bCpyKmeV=1; amp_cookie_testUR2QysrHJup5ib1Hf7KW=Thu Dec 17 2020 20:31:01 GMT-0600 (Central Standard Time); amp_cookie_testwI0p1f3OapsJ9wcFcEAigO=Thu Dec 17 2020 21:39:21 GMT-0600 (Central Standard Time); _tldtest_GpIYcD06-zINFSkKIfhX5U=1; amp_cookie_test7CkUTJmqVNm66KoUMvghpH=Thu Dec 17 2020 21:39:21 GMT-0600 (Central Standard Time); _tldtest_9Ys_94GNS7a21mcXEJEq_X=1; amp_cookie_test4Ge1-wS2SzQuDaD8hZF0nT=Sat Dec 19 2020 07:00:27 GMT-0600 (Central Standard Time); _tldtest_1QKPeTr9vZ0B_LWBh33UuX=1; _tldtest_vJNWeBSKRasUfdmecOZYjG=1; amp_cookie_testmKHEFBtoRVCK0taRpS_cLS=Sat Dec 19 2020 07:00:33 GMT-0600 (Central Standard Time); amp_cookie_testLjfYsztX70W0mHyTBqCINf=Sat Dec 19 2020 08:20:35 GMT-0600 (Central Standard Time); amp_cookie_test4LXy16zVal9qaSlGlTXKm0=Wed Dec 23 2020 12:04:43 GMT-0600 (Central Standard Time); _tldtest_BK5Hp8JyZKlW3pe9mBI0j8=1; _tldtest_CeZ5E2bv7mcB0_R-8luWFO=1; amp_cookie_testD0cuvHjIACqWnf4rBHrRoa=Wed Dec 23 2020 12:04:43 GMT-0600 (Central Standard Time); amp_cookie_testPmrCCYBm9v8RUlrbT3WDEe=Wed Dec 23 2020 12:06:16 GMT-0600 (Central Standard Time); _tldtest_e3oNOAADbVYEZjPtkfQ0fS=1; _tldtest_aeFuoIdwOQZS1V3GAmdARH=1; amp_cookie_testOi8l0uBvTQEx0BrXkTv9_Q=Wed Dec 23 2020 12:06:16 GMT-0600 (Central Standard Time); amp_cookie_test2FymRE8BsLfn5AaJs2JLaA=Wed Dec 23 2020 19:46:16 GMT-0600 (Central Standard Time); _tldtest_6KiKlfI2zZzl9vSt25R0dF=1; _tldtest_s4YrJTZNuU8GSRFZg3tNeo=1; _tldtest_AFPkckDADmucfRLVQTJCxw=1; amp_cookie_test4z39i0CXHy0IYqV9n0cH41=Wed Dec 23 2020 19:51:06 GMT-0600 (Central Standard Time); _tldtest_4GuaVjNQTC85bnNtYMh1Id=1; amp_cookie_testH2Oq0gXxapu2n59T1mRKrz=Wed Dec 23 2020 19:51:10 GMT-0600 (Central Standard Time); amp_cookie_test3b0vAEQJk431mhWpNNcYmH=Wed Dec 23 2020 21:34:37 GMT-0600 (Central Standard Time); _tldtest_9aZPABVgSDM9hp1XzAO36w=1; _tldtest_ytn4X4UNLnV3I6ss7lIXQL=1; amp_cookie_test4-Wl9-yzDnUdtcehmgSl30=Wed Dec 23 2020 21:34:37 GMT-0600 (Central Standard Time); amp_cookie_testZG8yQ7mvYdlErIensHN_59=Fri Dec 25 2020 12:08:42 GMT-0600 (Central Standard Time); _tldtest_PstFnDcPuZ2v6rVRzaRbLT=1; _tldtest_nQ87JCxCJNj5tLxmmF7bka=1; amp_cookie_test7YwFKRHETxwqi3gAu9gJ39=Fri Dec 25 2020 12:08:42 GMT-0600 (Central Standard Time); amp_cookietestt3lUrvNySFUxUP-QF_wOE=Sat Jan 02 2021 06:58:38 GMT-0600 (Central Standard Time); _tldtest_KSjhoBhDYfIWYlve3vvI5b=1; _tldtest_r-WxEuv_16F5i8Y4VgG4ik=1; amp_cookie_testxjL4DhUMRkk--FrfAZNe4o=Sat Jan 02 2021 06:58:38 GMT-0600 (Central Standard Time); amp_cookie_testczbREpWabLFmGiJiEKUKen=Sat Jan 02 2021 08:29:33 GMT-0600 (Central Standard Time); _tldtest_ZClah4fntVS4A_qLciITct=1; _tldtest_74W5EY-g1M3QJ9omDFBO3O=1; amp_cookie_testVee-4PY4shsF8SIubHVvz8=Sat Jan 02 2021 08:29:33 GMT-0600 (Central Standard Time); amp_cookie_testSjRnfnPSvDtVq-wsHWFX4l=Sun Jan 03 2021 14:57:32 GMT-0600 (Central Standard Time); _tldtest_t-Fhr_XG6AorKnIZ538p2h=1; _tldtest_Eer0NZEA27cxTCJBAsa81y=1; amp_cookie_testkKIimfKzGWuqDdCENoXPpy=Sun Jan 03 2021 14:57:32 GMT-0600 (Central Standard Time); amp_cookie_testtzcbQzbtnX2UfNAu-lBsiX=Sun Jan 03 2021 16:21:04 GMT-0600 (Central Standard Time); _tldtest_KWNj56JuLUFJ5LHM6oGDrS=1; amp_cookie_testbceziUF2oLSOSR7W1U1nS1=Sun Jan 03 2021 16:21:04 GMT-0600 (Central Standard Time); _tldtest_fOH3ae5rkqJ-vMubbc2Hvw=1; _tldtest_iiVdWLtqICZ7ynEUSudsp7=1; amp_cookie_test3wC6KlKFDSUpQ9CuAwujn-=Sat Jan 09 2021 07:00:00 GMT-0600 (Central Standard Time); amp_cookie_testjCzWR4wr7cIseiSo4XisUk=Sat Jan 09 2021 08:29:40 GMT-0600 (Central Standard Time); _tldtest_gf5gXynOMTNQ6S-BhchE8V=1; _tldtest_AYy72mFnSe61XLGJ5vuWC0=1; amp_cookie_testeQwncql1zQHtdxidaxSobA=Sat Jan 09 2021 08:29:40 GMT-0600 (Central Standard Time); _tldtest_hBD4WjYn6DP1YeWihY56NB=1; amp_cookie_testx-2HEpQTEUOCxIyIordYTH=Sat Jan 09 2021 17:34:33 GMT-0600 (Central Standard Time); _tldtest_4IA1GoSFbZB_f4fw8ofKaN=1; amp_cookietestyLk2etIcKgHauBY0pQdig=Sun Jan 10 2021 14:59:00 GMT-0600 (Central Standard Time); _tldtest_rEoCLy2UedS1f678ZnOvTi=1; _tldtest_OCt8WgvxZ3-1Kb175704ja=1; amp_cookie_testNJGbwYUE0iEbjbtWO_1ueZ=Sun Jan 10 2021 14:59:00 GMT-0600 (Central Standard Time); _tldtest_4TyfErl2AfF56L1Q5_AyJ5=1; _tldtest_j-5VfN6GBgKOIojGSUzMcb=1; amp_cookie_test0QxKH_Klxga7QoWn5gRCX9=Sun Jan 10 2021 15:52:35 GMT-0600 (Central Standard Time); amp_cookie_test5bX9LBM5n7GW62gutKbgug=Sun Jan 10 2021 15:52:40 GMT-0600 (Central Standard Time); _tldtest_bMtIFYgjZ7IuacVuOec09E=1; amplitude_testjit.si=MC4xNDU0NzYwNzQzNDA1MjY1Ng==; _tldtest_4IhR2J2alu7L-uliey_wWM=1; amp_cookie_testjtovpmEwKiDncaUMcQkZmK=Sun Jan 10 2021 15:52:40 GMT-0600 (Central Standard Time); amp_fafdba=I9i0gMj7BWYAOYSvNshGAt...1ern4io8d.1ern4iuim.h.15.1m

damencho commented 3 years ago

Do you have some extra extensions installed in your chrome, like https-everywhere ... ? I have never cleaned cookies for meet.jit.si in my browser and I don't have such thing.

damencho commented 3 years ago

I see people are discussing this is a problem in some extensions: https://github.com/amplitude/Amplitude-JavaScript/issues/326

jeffbski commented 3 years ago

On this particular laptop I do have https-everywhere installed, but this has also occurred before on my other laptop which has only deluminate and lastpass extensions.

jeffbski commented 3 years ago

So are the amp_cookie_test and _tldtest cookies not created by jitsi?

jeffbski commented 3 years ago

If these are not being created by jitsi then this is clearly an extension problem or external problem.

damencho commented 3 years ago

Yep, we are not using cookies in the code. But external dependencies like amplitude use it ...

Zethson commented 3 years ago

I also ran into this issue. Also have https-everywhere installed, but even when disabled the problem persists.

Thomas131 commented 3 years ago

same issue, https-everywhere installed as well as uMatrix&Co. Seems to be a meet.jit.si specific problem, is it?

damencho commented 3 years ago

It is some problem with those extensions and amplitude. Nothing on the jitsi-meet side or meet.jit.si, or at least there is nothing we can do about it.

Zethson commented 3 years ago

On this particular laptop I do have https-everywhere installed, but this has also occurred before on my other laptop which has only deluminate and lastpass extensions.

@damencho some guy wrote this, are you sure?

damencho commented 3 years ago

I'm sure that we do not use cookies. And I'm sure there were reports for this kind of incompatibilities. Look at the link I posted above.

janvlug commented 3 years ago

I have this issue as well now and then. I'm using Firefox on Fedora with HTTPS Everywhere and several other extensions (Privacy Badger, uBlock Origin, DuckDuckGo Privacy Essentials, ClearURLs) enabled. If we are sure that it is an HTTPS Everywhere issue, I could report it to their issue tracker at: https://github.com/EFForg/https-everywhere/issues What do you think, should I raise an HTTP Everywhere issue?

Zethson commented 3 years ago

Yes, please.

vzaliva commented 3 years ago

I have disabled HTTPS everywhere but the problem persists.

Zethson commented 3 years ago

@damencho This seems to be the root of the problem: https://github.com/amplitude/Amplitude-JavaScript/issues/326

Would it be possible to reopen this issue?

saghul commented 3 years ago

I reopened, but there is nothing actionable for us unfortunately.

Thomas131 commented 3 years ago

If Amplitude doesn't patch their code, an workaround could be to run a cookie-cleanup-routine after some time and deleting all cookies matching a regex.

ls-1N commented 3 years ago

I have disabled HTTPS everywhere but the problem persists.

Did the problem re-appear for you after disabling HTTPS everywhere AND deleting the cookies (i.e. not having the problem for at least a moment)?

Zethson commented 3 years ago

I have disabled HTTPS everywhere but the problem persists.

Did the problem re-appear for you after disabling HTTPS everywhere AND deleting the cookies (i.e. not having the problem for at least a moment)?

Deleting cookies solved it temporarily, but then the problem appeared again.

bfg1981 commented 3 years ago

@Thomas131 I haven't spent any time digging into this issue before now, but I see you posted a patch to https://github.com/amplitude/Amplitude-JavaScript/issues/326 I assume this can be employed directly by jitsi if it is not fixed upstream anytime soon?

damencho commented 3 years ago

We do not build amplitude javascript, we use it as npm module https://github.com/jitsi/jitsi-meet/blob/9e6939d25f71ca8640b314f413f4dfeec0d9ae5d/package.json#L41

bfg1981 commented 3 years ago

@damencho I found this package, which I haven't tried but seems to offer the ability to patch within the npm context: https://www.npmjs.com/package/patch-package

ls-1N commented 3 years ago

I have disabled HTTPS everywhere but the problem persists.

Did the problem re-appear for you after disabling HTTPS everywhere AND deleting the cookies (i.e. not having the problem for at least a moment)?

Deleting cookies solved it temporarily, but then the problem appeared again.

Yup, now I've had the same experience as well. I disabled the addon "HTTPS everywhere" for meet.jit.si, but in the last week or two I've had Request Header Or Cookie Too Large twice already (after each time, deleting the cookies). So some other addons might contribute as well?

This time the cookies were

| | | |---|---| _tldtest__tJfkh0BBC1OI00-VnsbNv | "1" _tldtest_0m6r2U412jV39K_8RZlIV5 | "1" _tldtest_26NOob9LJIIFsyFpPHsh3G | "1" _tldtest_3P_KfJP8Ji6BP2Tf2x4cXT | "1" _tldtest_5__wMabPLw-Sm6Lgu6_QhW | "1" _tldtest_6Ec9Rp2oOoHgmOLwJm-G98 | "1" _tldtest_7frR3OnrS69v-YhS8RMzsj | "1" _tldtest_8nSUJTDqqEAD4q3IwwmhzT | "1" _tldtest_8XidAODDYqYHnR-Hat7GeF | "1" _tldtest_A7-_9HMtxtuvmyzG4le3RH | "1" _tldtest_AchMCySNAa3_dn0l1NC3yo | "1" _tldtest_AhQSDXjQHlpYu6vE0t4wkf | "1" _tldtest_AjO4scwG8lPLV6nh0Djlb1 | "1" _tldtest_alFRIl3kodCjo8nOUp1luZ | "1" _tldtest_Anpxs4K_O_BtV79DsZJ8Hh | "1" _tldtest_aOzCKxk4pe68lyUVOZ1FpL | "1" _tldtest_B19T6d3dGDISoOU3M6VTwM | "1" _tldtest_B7v-k2idQExAcRiRYjqetY | "1" _tldtest_CF-6c9kOMmuJxDZ2GI5U6q | "1" _tldtest_CFAWV3OuyhEq8xxMG4HWow | "1" _tldtest_CHALjXcE73dTukdaQR6kiU | "1" _tldtest_DC9JO2Xq3HRuJBd6fXbquT | "1" _tldtest_DGCcj28nLm4IAeOflBWX-D | "1" _tldtest_fAaCMa7VkWJt26J_4ibXo5 | "1" _tldtest_fPWy4UIOmezHN2a9z3O0T4 | "1" _tldtest_fVmUcBRPBNqQB2tCMXiSYv | "1" _tldtest_FxWGbWdzv0FWI9u84bGccF | "1" _tldtest_gOAWo0CMOZ8pA0MfErsxuD | "1" _tldtest_HBChfyQVBKC0nap42dF-6x | "1" _tldtest_HWXMDSTiV0C0wkBHJjMFYC | "1" _tldtest_J0iApgz_mAkvG0ovutLrqR | "1" _tldtest_JssuJUNO7ZZ7uTobNQJ5yr | "1" _tldtest_kh-NHCyruMwTUr3DmHN3si | "1" _tldtest_kIf8XK8Re9opVO-iCcJJLG | "1" _tldtest_Kmqal94nJh6ZnZMiMusnaF | "1" _tldtest_KVIXOyfAiTFZ4AZd3B_67S | "1" _tldtest_kxbPoydrlq5_a4YJ5g8bch | "1" _tldtest_l5YA9MSOILPmbHiugBBRnl | "1" _tldtest_lZqVx8sEbKpN5BC_dGNHH7 | "1" _tldtest_M1or5Ybbjgpx7cbX3T3w3A | "1" _tldtest_M6cthPfzVHeCrsGNTF23kU | "1" _tldtest_Med_icA44uLk9hJsm4KvtU | "1" _tldtest_mfd1tOqkIBfgsRX9BtPzqZ | "1" _tldtest_mYDx89cyBIPzZkddb0q5MA | "1" _tldtest_NfMbinCEXMwyw9NWrxUen1 | "1" _tldtest_NxVfPBfydWfcMwzSWmeHZx | "1" _tldtest_OZsUUQT--q2HiudLCain0s | "1" _tldtest_qAUkMR2Tj32335EC7ukKIj | "1" _tldtest_re5Qy7-Eu0lp-buywP02NA | "1" _tldtest_SaaK1lKOBpeCUa-WfTxUqk | "1" _tldtest_tB8bbN5D9zyGuVuzAsEkG3 | "1" _tldtest_tgVQvAMNN8ZrTieuPF8_ST | "1" _tldtest_tI7nbOXL6d4jjPsjoazO73 | "1" _tldtest_tP1iiPyzu4WG8Is1ROh-qh | "1" _tldtest_UPg8WLFVNxYVxRiPaILhph | "1" _tldtest_utr289QveR4u0_OYW5D3gR | "1" _tldtest_VRlWWB4fAve6xs70G6Lp4J | "1" _tldtest_vZNUFAtFfnCoAjWJq9PTlr | "1" _tldtest_w92bc94KlIz8iyqH3iLba9 | "1" _tldtest_WRMSPvbqVDgL4yXYi0QVgg | "1" _tldtest_wv7S7IfG5v01dzcS34C98H | "1" _tldtest_YyFeotf19VwjMOY2oZ2gPB | "1" amp_cookie_test_aMeg_YgrjwBAToHlPu1uW | "Tue Apr 27 2021 12:07:41 GMT+0300 (Eastern European Summer Time)" amp_cookie_test0IXRjbq5q_RlfUBdCaGQqU | "Mon Apr 26 2021 10:39:56 GMT+0300 (Eastern European Summer Time)" amp_cookie_test1dz67ScgcB2HxXlx44G7ps | "Fri Apr 23 2021 13:46:11 GMT+0300 (Eastern European Summer Time)" amp_cookie_test1t8Kk8Aw8BuzkvauvGvNQW | "Mon Apr 26 2021 10:39:56 GMT+0300 (Eastern European Summer Time)" amp_cookie_test2peJhsa5tZCdHwv1Pj4dIx | "Tue Apr 27 2021 15:49:48 GMT+0300 (Eastern European Summer Time)" amp_cookie_test2SW08q9FX9jXY_JGwPvnoQ | "Thu Apr 22 2021 13:21:57 GMT+0300 (Eastern European Summer Time)" amp_cookie_test4Cxjyk2u5wdAV5g4pf_m8x | "Thu Apr 22 2021 16:24:03 GMT+0300 (Eastern European Summer Time)" amp_cookie_test5o5ZrV7kbpNkDn4QitH3wP | "Wed Apr 28 2021 10:59:58 GMT+0300 (Eastern European Summer Time)" amp_cookie_test7RRhwFMXPF---myecIugWx | "Fri Apr 23 2021 13:46:11 GMT+0300 (Eastern European Summer Time)" amp_cookie_test9kJsUJMiLx5_nATzsAYjYe | "Mon Apr 26 2021 18:00:12 GMT+0300 (Eastern European Summer Time)" amp_cookie_testAEiYFippEIIYjp22kFNJmG | "Tue Apr 27 2021 21:29:59 GMT+0300 (Eastern European Summer Time)" amp_cookie_testaV5LXU0DznORfsoJWcWAfY | "Thu Apr 29 2021 09:49:33 GMT+0300 (Eastern European Summer Time)" amp_cookie_testAvuNWrjhv4TE-za44KcqE8 | "Tue Apr 27 2021 21:42:30 GMT+0300 (Eastern European Summer Time)" amp_cookie_testBxmOj9rz6QYJXzv5f-9WU3 | "Tue Apr 27 2021 11:14:57 GMT+0300 (Eastern European Summer Time)" amp_cookie_testcYS40GFTY1RR45uzSzw2OE | "Wed Apr 28 2021 10:59:58 GMT+0300 (Eastern European Summer Time)" amp_cookie_testdGr50GcLZYVvrUjjAPHIZg | "Tue Apr 27 2021 11:12:01 GMT+0300 (Eastern European Summer Time)" amp_cookie_testEuaJcKeRqq0GghGlPrHa2B | "Thu Apr 22 2021 13:21:57 GMT+0300 (Eastern European Summer Time)" amp_cookie_testFvWYMJhMtXXOyppkQ06u-J | "Fri Apr 23 2021 20:38:29 GMT+0300 (Eastern European Summer Time)" amp_cookie_testgBxBd8ygHooU39po3_C5Jk | "Thu Apr 29 2021 09:51:05 GMT+0300 (Eastern European Summer Time)" amp_cookie_testgF2cs3GNIcz_2OKpNHh66e | "Fri Apr 23 2021 20:38:29 GMT+0300 (Eastern European Summer Time)" amp_cookie_testGnwp_LEpgGG2Ff4oHRrOMB | "Tue Apr 27 2021 12:45:06 GMT+0300 (Eastern European Summer Time)" amp_cookie_testgRNXrjwiOlm21tWZEQdQl_ | "Thu Apr 29 2021 09:43:40 GMT+0300 (Eastern European Summer Time)" amp_cookie_testHzTvLZg-cRQ473IaltEV8_ | "Tue Apr 27 2021 11:12:01 GMT+0300 (Eastern European Summer Time)" amp_cookie_testiysygeflpQhjYy1_sQIZHs | "Tue Apr 27 2021 21:29:59 GMT+0300 (Eastern European Summer Time)" amp_cookie_testJs4ooKKA4taudvRCLiixJ8 | "Thu Apr 29 2021 09:54:47 GMT+0300 (Eastern European Summer Time)" amp_cookie_testjvUxMtLTUtXKPaQ0Q72m_c | "Thu Apr 22 2021 16:00:36 GMT+0300 (Eastern European Summer Time)" amp_cookie_testjVzIDYRkgeCv-lWfZopFTj | "Tue Apr 27 2021 11:14:57 GMT+0300 (Eastern European Summer Time)" amp_cookie_testjzP1Xus7pi8HnsEC0iC7MB | "Tue Apr 27 2021 22:41:33 GMT+0300 (Eastern European Summer Time)" amp_cookie_testK-VpXsUtr57YgfB83rjYWN | "Thu Apr 29 2021 09:50:36 GMT+0300 (Eastern European Summer Time)" amp_cookie_testKRhcOPT2oUkBz3Zx_BUhec | "Thu Apr 29 2021 09:54:47 GMT+0300 (Eastern European Summer Time)" amp_cookie_testl1nd6MLS4nD6ryxM3amFnd | "Thu Apr 22 2021 16:00:01 GMT+0300 (Eastern European Summer Time)" amp_cookie_testmACXvPQAni9dSVc-IGox6V | "Fri Apr 23 2021 15:39:30 GMT+0300 (Eastern European Summer Time)" amp_cookie_testmpFF9vV2Yn_fmSo6mtAbwp | "Fri Apr 23 2021 21:36:19 GMT+0300 (Eastern European Summer Time)" amp_cookie_testOGNbhr_oZY_qubC_w8SfRN | "Fri Apr 23 2021 15:59:03 GMT+0300 (Eastern European Summer Time)" amp_cookie_testP2JFdCGzHDr6zsOAIvsGmr | "Fri Apr 23 2021 15:39:30 GMT+0300 (Eastern European Summer Time)" amp_cookie_testp4NL5BZy2zB_KdKzcAzhYa | "Fri Apr 23 2021 18:57:08 GMT+0300 (Eastern European Summer Time)" amp_cookie_testq2FvYgL4DcaPc2NryryfD4 | "Thu Apr 22 2021 11:15:24 GMT+0300 (Eastern European Summer Time)" amp_cookie_testqehOFvv5VfgclK9wUxFaAQ | "Thu Apr 29 2021 09:51:47 GMT+0300 (Eastern European Summer Time)" amp_cookie_testR2fxP1zhoEwdsnvtZjxE89 | "Tue Apr 27 2021 15:49:48 GMT+0300 (Eastern European Summer Time)" amp_cookie_testrj8pb4in7S19OywWBKbHb6 | "Wed Apr 28 2021 11:10:17 GMT+0300 (Eastern European Summer Time)" amp_cookie_testRqdPE83nDb27y-U858-hrN | "Mon Apr 26 2021 18:00:12 GMT+0300 (Eastern European Summer Time)" amp_cookie_testS0bc1Pi8cASfJfyxqT_SjU | "Fri Apr 23 2021 15:59:03 GMT+0300 (Eastern European Summer Time)" amp_cookie_testsGV53G6yhCzrSao9TEfNVw | "Fri Apr 23 2021 18:57:08 GMT+0300 (Eastern European Summer Time)" amp_cookie_testSuXTCCVrsR62JG5VtS6m8l | "Tue Apr 27 2021 12:07:41 GMT+0300 (Eastern European Summer Time)" amp_cookie_testSvBeYAF6d59YLghiNnZCPe | "Thu Apr 22 2021 11:15:24 GMT+0300 (Eastern European Summer Time)" amp_cookie_testsyjNzEROL2xt5HzK8A035x | "Thu Apr 29 2021 09:43:40 GMT+0300 (Eastern European Summer Time)" amp_cookie_testT7Dvf1r9FWAviWPgbwBgEA | "Thu Apr 22 2021 16:00:01 GMT+0300 (Eastern European Summer Time)" amp_cookie_testTp0ch_zRC9LYA216y3xh_R | "Fri Apr 23 2021 14:00:41 GMT+0300 (Eastern European Summer Time)" amp_cookie_testW9a2Y1-7mBIf6Kp1od_qMi | "Thu Apr 29 2021 09:50:45 GMT+0300 (Eastern European Summer Time)" amp_cookie_testWhP0iwsrcxNEM_OaibVgaD | "Thu Apr 22 2021 16:00:36 GMT+0300 (Eastern European Summer Time)" amp_cookie_testWo5ZQhzcxa9jLPZrcK-PBI | "Tue Apr 27 2021 22:41:33 GMT+0300 (Eastern European Summer Time)" amp_cookie_testWvjNfZuwOdlawOrspfp7Ey | "Fri Apr 23 2021 14:00:41 GMT+0300 (Eastern European Summer Time)" amp_cookie_testXAKKdtc-JED1xBcQeM5kWS | "Tue Apr 27 2021 12:45:06 GMT+0300 (Eastern European Summer Time)" amp_cookie_testy4SEn4zJncwrQ9Ztiusl1F | "Fri Apr 23 2021 21:36:19 GMT+0300 (Eastern European Summer Time)" amp_cookie_testyAYEop3UiYxz2AAUs4zTlJ | "Tue Apr 27 2021 21:42:30 GMT+0300 (Eastern European Summer Time)" amp_cookie_testYpPL_2cvx_N1XTjyslfnQg | "Wed Apr 28 2021 11:10:17 GMT+0300 (Eastern European Summer Time)" amp_cookie_testyTPSrzeC92TRzx9c0JX4lu | "Thu Apr 22 2021 16:24:03 GMT+0300 (Eastern European Summer Time)" amp_fafdba | "Wxys8UpPrsGq5js02I5qqq...1f4e5sqlv.1f4e6h81n.1l.29.3u" amplitude_testjit.si | "MC44OTU3MjY4NjQ1NDgwNzAy"

My addons list from about:support

| Name | Type | Version | Enabled | ID | |---|---|---|---|---| British English Dictionary (Marco Pinto) | dictionary | 2.95 | true | marcoagpinto@mail.telepac.pt English United States Dictionary | dictionary | 78.0 | true | @unitedstatesenglishdictionary Ageless | extension | 1.3 | true | 2341n4m3@gmail.com Amazon.com | extension | 1.3 | true | amazondotcom@search.mozilla.org Augmented Steam | extension | 2.0.1 | true | {1be309c5-3e4f-4b99-927d-bb500eb4fa88} Bing | extension | 1.3 | true | bing@search.mozilla.org Bookmark Manager and Viewer | extension | 0.2.6.1 | true | {beb1b1c0-32b9-47d8-bbd1-f65bed4e7c22} DuckDuckGo | extension | 1.1 | true | ddg@search.mozilla.org eBay | extension | 1.3 | true | ebay@search.mozilla.org Google | extension | 1.1 | true | google@search.mozilla.org Grammarly for Firefox | extension | 8.872.0 | true | 87677a2c52b84ad3a151a4a72f5bd3c4@jetpack Haidoku | extension | 1.17.0 | true | {31729e3f-c535-43f8-91a0-706f572fc1c6} HTTPS Everywhere | extension | 2021.4.15 | true | https-everywhere@eff.org PKCS11 loader | extension | 1.0.5 | true | {02274e0c-d135-45f0-8a9c-32b35110e10d} Resurrect Pages | extension | 8 | true | {0c8fbd76-bdeb-4c52-9b24-d587ce7b9dc3} Tampermonkey | extension | 4.12.6132 | true | firefox@tampermonkey.net Terms of Service; Didn’t Read | extension | 4.0.7 | true | jid0-3GUEt1r69sQNSrca5p8kx9Ezc3U@jetpack Token signing | extension | 0.0.31 | true | {443830f0-1fff-4f9a-aa1e-444bafbc7319} Tree Tabs | extension | 1.9.3 | true | TreeTabs@jagiello.it uBlock Origin | extension | 1.35.0 | true | uBlock0@raymondhill.net User-Agent Switcher | extension | 0.2.7 | true | {75afe46a-7a50-4c6b-b866-c43a1075b071} Wikipedia (en) | extension | 1.1 | true | wikipedia@search.mozilla.org English (GB) Language Pack | locale | 88.0buildid20210415204500 | true | langpack-en-GB@firefox.mozilla.org English (US) Language Pack | locale | 88.0buildid20210415204500 | true | langpack-en-US@firefox.mozilla.org Iridium for YouTube | extension | 1.2.4 | false | iridium@particlecore.github.io Plasma Integration | extension | 1.8.0.1 | false | plasma-browser-integration@kde.org Reddit Enhancement Suite | extension | 5.22.4 | false | jid1-xUfzOsOFlzSOXg@jetpack Rikaichamp | extension | 0.5.1 | false | {59812185-ea92-4cca-8ab7-cfcacee81281} Text Contrast for Dark Themes | extension | 2.1.6 | false | jid1-nMVE2oP40qeQDQ@jetpack English (CA) Language Pack | locale | 88.0buildid20210415204500 | false | langpack-en-CA@firefox.mozilla.org

My Tampermonkey scripts only affect Youtube.

bfg1981 commented 3 years ago

Fixed upstream:

https://github.com/amplitude/Amplitude-JavaScript/pull/381

ls-1N commented 3 years ago

Does anyone mind explaining how does this work to a curious mind? For the issue to cease do we have to wait for an update to HTTPS everywhere (and possibly to other addons using Amplitude) where they bump up their Amplitude version?

bfg1981 commented 3 years ago

Does anyone mind explaining how does this work to a curious mind? For the issue to cease do we have to wait for an update to HTTPS everywhere (and possibly to other addons using Amplitude) where they bump up their Amplitude version?

This was never a HTTPS everywhere issue, using HTTPS everywhere just exacerbated the situation. For this to be fixed jitsi needs to incorporate the change. Most likely that will be by bumping their Amplitude version, but there are also other options for more immediate resolution. Eg. patching with the fix, or using an unreleased head version of Amplitude.

zoracon commented 3 years ago

Hello, HTTPS Everywhere lead developer here.

This extension does NOT use any analytics like Amplitude or anyone else in the code. We only set secure cookies on domains that support them. We do not have access or control when analytics libraries are utilized in ways that break user experience.

bfg1981 commented 3 years ago

This extension does NOT use any analytics like Amplitude or anyone else in the code. We only set secure cookies on domains that support them. We do not have access or control when analytics libraries are utilized in ways that break user experience . @zoracon I only did a brief analysis of the problem but what seems to be the case is that the offending code path is run much more frequently when HTTPS Everywhere is enabled. So while everyone will experience this eventually when running Jitsi for a long time, HTTPS Everywhere accelerates overfilling the cookie, possibly by triggering state changes. Not saying this is caused by HTTPS Everywhere, or that HTTPS Everywhere is behaving wrong in any way, cause the error is rightfully fixed in Amplitude, but interactions with HTTPS Everywhere seems to be contributing significantly.

janvlug commented 3 years ago

Lately, I experience this error again. Should I create a new issue, or can this one be re-opened? Screenshot of error message: image

saghul commented 3 years ago

Is there a bug reported in amplitude?

Thomas131 commented 3 years ago

Do you want to show your cookies? What Browser do you use? Does JitSi work in Private Browsing Mode?

janvlug commented 3 years ago

amplitude

I do not know what you mean by this.

Do you want to show your cookies? What Browser do you use? Does JitSi work in Private Browsing Mode?

Maybe I can share my cookies, although I do not really know how to do this. I use Firefox, fully up to date on Fedora 34. I have several extensions in Firefox: HTTPS Everywhere, uBlockOrigin, Privacy Bagder, ClearURLs, DuckDuckGo privacy. When I have this issue, I sometimes start a private window. That does always work flawless. Removing the cookies make Jitsi work for a while, but over time I get the Cookie Too Large error.

saghul commented 3 years ago

I do not know what you mean by this.

If you follow this issue upwards you'll see that was a problem with the amplitude-js library. A bug was filed, which then got fixed. Not sure if that is the case, we can know if you share the cookies you have for the meet.jit.si domain.

bfg1981 commented 3 years ago

@saghul has the error appeared and disappeared? If not, you should try to delete the cookie, as the fix doesn't really make the cookie smaller, it only prevents it from growing. If it reappears after deleting the cookie, you should definitely file a new bug.

saghul commented 3 years ago

I haven't heard of this bug reappearing.

bfg1981 commented 3 years ago

Sorry @saghul , I meant to address @janvlug

janvlug commented 3 years ago

@bfg1981 I think I have seen it disappearing and appearing again (or maybe it just happens less). I am using Jitsi less lately. I for sure deleted the cookies. If it happens again, I will file a new bug.

simonv3 commented 2 years ago

I've started seeing this again in the last few days, have now deleted the cookies twice. Hadn't seen it in months, so assume it had been fixed.

HalosGhost commented 1 year ago

This bug has never stopped happening for me. Unfortunately, clearing all cookies results in a few bad outcomes (e.g., any already-made Google Calendar jitsi-integration-created meeting links break when you clear the cookies).

Is there, at least, a known extension or regex for cookies which are safe to delete?