keiyoushi / extensions-source

Source code of extensions for Tachiyomi/Mihon and variants.
https://keiyoushi.github.io/
Apache License 2.0
1.9k stars 433 forks source link

MangaFire WAF security #4035

Open DDRook opened 1 month ago

DDRook commented 1 month ago

Source information

MangaFire 1.4.6

Source language

All

Steps to reproduce

Try to update, or open ANY pages for extension

Expected behavior

Should update, download, or open manga or site

Actual behavior

Null error on tachiyomi view, or WAF Security error on webview

Mihon/Tachiyomi version

App version: 0.16.5 (standard, 2a01a2a, 6, 2024-04-09T09:58:14Z) Android version: 14 (SDK 34; build UP1A.231005.007.S908WVLS6EXF8) Device brand: samsung Device manufacturer: samsung Device name: b0q (b0qcsx) Device model: SM-S908W WebView: Android System WebView 126.0.6478.134

Android version

Android 14

Other details

When accessing site direct from browser or computer no issues with WAF security. Only when accessing through tachiyomi

Acknowledgements

Smol-Ame commented 1 month ago

As mentioned before in the Keiyoushi Discord repo-support channel:

Screenshot_20240715_201953

DDRook commented 1 month ago

Damn, I've done the CCC and webview stuff, any known useragents that seem to be working?

Smol-Ame commented 1 month ago

Damn, I've done the CCC and webview stuff, any known useragents that seem to be working?

There isn't a specific user-agent that works for everybody, especially due to differences in source, region, and Cloudflare protection level.

Search up "latest user-agents", go to any of the sites, copy & paste a new user-agent into Mihon, restart Mihon & check WebView to see if it passes, if it doesn't pass, repeat

DDRook commented 1 month ago

I'm looking for web browser user agents, right? Not OS user agents?

Smol-Ame commented 1 month ago

I'm looking for web browser user agents, right? Not OS user agents?

Any browser, any OS, and any device, whatever makes it work for you. Remember to restart the app after changing the UA & checking WebView to see if it works/passes

DDRook commented 1 month ago

looks like im not gonna get any luck, ive used every one i can find and i pass through the WAF but opening any other of their pages prompts the WAF again and i still get the Json error/Null error