qbittorrent / qBittorrent

qBittorrent BitTorrent client
https://www.qbittorrent.org
Other
27.52k stars 3.91k forks source link

WebUI settings empty when viewed through iFrame #21483

Open trafficman opened 1 week ago

trafficman commented 1 week ago

qBittorrent & operating system versions

Docker, qbittorrent-nox 5.0.0

What is the problem?

Upon upgrading to 5.0.0 (and tested across both Firefox and Edge with caches cleared), when the WebUI is viewed through an iFrame (in my case when used with the homepage "Organizr", testing in a very simple HTML iFrame by itself I can't even seem to get past the login prompt despite clickjacking protection being turned off), the settings menu appears completely empty/reset to default, despite all of my previous settings still actually being in place (confirmed by visiting the webui directly, where the settings still functions as normal), and, likely related, the "About" and "Software Used" sections also do not show any version information

Steps to reproduce

  1. Launch qbittorrent-nox via docker
  2. Open WebUI inside iFrame
  3. View settings and/or about

Additional context

image image

Log(s) & preferences file(s)

qBittorrent.conf.txt qbittorrent.log.txt

Sn00zEZA commented 4 days ago

Same issue here, errors showing up in F12 console Blocked autofocusing on a <input> element in a cross-origin subframe. Refused to load the script 'https://static.cloudflareinsights.com/beacon.min.js/**********' because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-inline'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. mocha.min.js:26 Uncaught SecurityError: Failed to read a named property 'getCoordinates' from 'Window': Blocked a frame with origin "https://qbittorrent.servername.com/" from accessing a cross-origin frame.

QuarkZ26 commented 4 days ago

Same issue here also. The UI as well doesn't seem to be responding quite right at time, as in, not update. For example, I'll add a torrent and the progress bar will not update even though the torrent is running, refreshing the page will update it, then at that point it seems to work. Removing a torrent sometimes keeps the list of content in the tab, after the torrent itself was removed.