quarkusio / quarkusio.github.io

Website for Quarkus project
https://quarkus.io
158 stars 371 forks source link

Absolutely no links work in Firefox with reasonable security settings #1100

Open sdunbar-wrs opened 3 years ago

sdunbar-wrs commented 3 years ago

Describe the bug There are no links on quarkus.io that can be clicked.

Which pages Pick a page, click on a link.

Because: 18:26:05.854 Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://dpm.demdex.net/id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=945D02BE532957400A490D4C%40AdobeOrg&d_nsid=0&d_mid=92180643808121403253983962995112937483&d_coppa=true&ts=1629159965840. (Reason: CORS request did not succeed).

Try an anchor tag with a local href. It's way simpler.

maxandersen commented 3 years ago

I use firefox and have zero such problems.

Can you elaborate what "reasonable security settings" mean for you ?

maxandersen commented 3 years ago

btw. i do see the cross-origin error but im not seeing linked blocked etc. so would love more specific details.

possible related past issues #236 and #209

maxandersen commented 3 years ago

@insectengine are you aware of us missing or changing some CORS setup?

sdunbar-wrs commented 3 years ago

Of course. I'm using the "Strict" settings: image

Note that with "Standard" settings the site works as expected. I'm on Firefox 91.0 on Ubuntu. I use Standard for quarkus.io for now on. Thanks for the help.

maxandersen commented 3 years ago

Well I believe we should work with strict. At least we did before so let's see why we are causing cors when we should mnt.

sandronm commented 3 years ago

I can confirm the navigation in the website is not working right now with Firefox 91

maxandersen commented 3 years ago

@insectengine do you know if/what we changed ?

maxandersen commented 3 years ago

Fyi I'm using latest Firefox so it's not broken in default Firefox afaics.

sandronm commented 3 years ago

Fyi I'm using latest Firefox so it's not broken in default Firefox afaics.

There is indeed no issue if I set my privacy settings to "standard". But "Strict" or "Custom" will cause the issue.

maxandersen commented 3 years ago

can you guys be more specific on what page and what links you have issues ?

I'm on Firefox 91 with strict enabled and not seeing navigation not working.

sandronm commented 3 years ago

can you guys be more specific on what page and what links you have issues ?

I'm on Firefox 91 with strict enabled and not seeing navigation not working.

Every single one ;-)

Here is a little screencast: https://www.youtube.com/watch?v=qlR-vIPq1dA

insectengine commented 3 years ago

It seems the Google analytics javascript is the culprit. I'm trying to sort out how to fix this.

insectengine commented 3 years ago

Currently, the URL for the Google Tag Manager is set to "https" and we have the nav issue with Firefox is set to strict. When I change the URL to "http", the navigation works for me locally.

insectengine commented 2 years ago

https://stackoverflow.com/questions/62478071/firefox-enhanced-privacy-protection-is-blocking-datalayer-push-to-google-tag-man

I don't know a way around this issue.

maxandersen commented 2 years ago

Turn of the conversion tracking for links should work or ?