Unresponsive webpages

[GitTheHellOutaHere]

Lately I've been experiencing unresponsive webpages on two sites caused by Chameleon.

Even after I uncheck every option, return things to their default settings, turn off tracking protection, allow all websockets, allow all cookies AND switch to real profile, the problem persists.

Only after disabling Chameleon in the Addons window do those pages function properly again.

On Target.com all I have to do is go to the homepage and wait 10 seconds for the yellow bar to appear.

On Craigslist.com it only happens when posting/reposting ads, whether I'm logged in or not. Refresh the posting page before the ad is published and wait 10 seconds for the yellow bar to appear. Press the Stop It button, refresh the page, wait another 10 seconds and the bar appears again. AFAICT Craigslist has no 3rd party cookies, analytics or other tracking garbage - just a login cookie.

Firefox 78.0.2 Chameleon 0.20.21-rc1

[sereneblue]

@GitTheHellOutaHere Can you check to see if there are any errors displayed in the developer console when you visit those sites? It might be an implementation issue with something, although Chameleon doesn't modify much when there aren't any options selected. I've read some users have experienced issues with FF78 so I'm not sure if it's because of FF or Chameleon even though you're able to reproduce the issue.

[GitTheHellOutaHere]

As I was copying the Console messages, I found AdGuard mentioned there and wondered why.

I had previously disabled the AdGuard extension when diagnosing this issue, but I had not quit the AdGuard app. And I didn't think about it being active because it's hidden in my menu bar.

So I tried again - disabling the extension had no effect. BUT, when I quit the app the problem disappeared. Now I wonder why disabling Chameleon with the AdGuard app running also fixed the issue?

[sereneblue]

@GitTheHellOutaHere That's an interesting find. I'm not sure how Chameleon could be affecting the AdGuard app; it shouldn't. Can you post the console messages? There may be something useful there.

[GitTheHellOutaHere]

This is what's shown after the page is refreshed:

GEThttps://post.craigslist.org/k/wpJW63XU6hGC9txIjENzVw/Ehs5Y?s=edit [HTTP/1.1 200 OK 944ms]

This page uses the non standard property “zoom”. Consider using calc() in the relevant property values, or using “transform” along with “transform-origin: 0 0”. Ehs5Y GEThttps://www.craigslist.org/js/postingform-concat.min.js?v=d0b610110e8d3854348ad323f116d72c [HTTP/1.1 304 Not Modified 606ms]

GEThttps://www.craigslist.org/js/leaflet-concat.min.js?v=4c56f70c4eb7294c8ffeb1d8fdcf4704 [HTTP/1.1 304 Not Modified 609ms]

GEThttps://www.craigslist.org/js/compatibility2.min.js?v=fd630767e654dff573113fe397b9a60d [HTTP/1.1 304 Not Modified 614ms]

GEThttps://www.craigslist.org/js/general-concat.min.js?v=2111bc640b19fbe02a5307259bd7cbcf [HTTP/1.1 304 Not Modified 615ms]

GEThttps://www.craigslist.org/js/postings-concat.min.js?v=2d4831dedac3b38ffbd3e225ccfb1a30 [HTTP/1.1 304 Not Modified 620ms]

GEThttps://local.adguard.org/?ts=1596341373834&type=content-script&dmn=post.craigslist.org&css=1&js=1&gcss=1&rel=1&rji=1&stealth=1&uag=TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NDsgcnY6NzguMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC83OC4w&trref=aHR0cHM6Ly9wb3N0LmNyYWlnc2xpc3Qub3JnLw== [HTTP/1.1 200 OK 149ms]

GEThttps://local.adguard.org/?ts=1596341373834&name=AdGuard%20Popup%20Blocker&name=AdGuard%20Assistant&name=AdGuard%20Extra&type=user-script [HTTP/1.1 200 OK 171ms]

GEThttps://post.craigslist.org/favicon.ico [HTTP/1.1 200 OK 0ms]

Deprecated include of L.Mixin.Events: this property will be removed in future releases, please inherit from L.Evented instead. S.extend/<@https://www.craigslist.org/js/leaflet-concat.min.js?v=4c56f70c4eb7294c8ffeb1d8fdcf4704:1:3276 S.extend@https://www.craigslist.org/js/leaflet-concat.min.js?v=4c56f70c4eb7294c8ffeb1d8fdcf4704:1:3294 @https://www.craigslist.org/js/leaflet-concat.min.js?v=4c56f70c4eb7294c8ffeb1d8fdcf4704:1:175256 leaflet-concat.min.js:1:3141 GEThttps://www.craigslist.org/static/www/localStorage-b2c30773fe82c3d5e475613ad0f725fa9ab277fb.html [HTTP/1.1 200 OK 0ms]

GEThttps://www.craigslist.org/js/bfp3-concat.min.js [HTTP/1.1 304 Not Modified 97ms]

GEThttps://www.craigslist.org/styles/images/ui-icons_888888_256x240.png [HTTP/1.1 304 Not Modified 96ms]

Failed to execute ‘postMessage’ on ‘DOMWindow’: The target origin provided (‘https://www.craigslist.org’) does not match the recipient window’s origin (‘https://post.craigslist.org’). localStorage-b2c30773fe82c3d5e475613ad0f725fa9ab277fb.html

And then if I just wait almost a minute, the yellow bar disappears and the page becomes responsive again and these entries show up:

Blocked https://post.craigslist.org/k/wpJW63XU6hGC9txIjENzVw/Ehs5Y?s=edit from extracting canvas data because no user input was detected. bfp3-concat.min.js:1:10490 Blocked https://post.craigslist.org/k/wpJW63XU6hGC9txIjENzVw/Ehs5Y?s=edit from extracting canvas data because no user input was detected. Ehs5Y:218:22 Failed to create WebGL context: WebGL is currently disabled. bfp3-concat.min.js:1:18887 Failed to create WebGL context: WebGL is currently disabled.

[sereneblue]

@GitTheHellOutaHere Hm, perhaps the AdGuard app is interacting with the extension. I noticed you're using Chameleon 0.20.21-rc1 which is the dev build of Chameleon. It allows external apps to interact with it, so I wonder if there's something going on there. I believe the AdGuard app injects a content script when making the call to local.adguard.org. Can you replicate the issue with the stable version of Chameleon from AMO?

[GitTheHellOutaHere]

I was unaware there was another version of Chameleon. I got this off Mozilla and didn't see another. Link?

[sereneblue]

@GitTheHellOutaHere The dev build is located here. v0.20.21-rc1 should be 0.20.21.1. You can verify this by exporting your settings and checking the version. It's not listed on AMO because it's self-hosted on Github so I'm a bit confused how you have it installed.

[GitTheHellOutaHere]

I may have been mistaken. I thought I got it from the Add-ons site where I got all my other extensions.

But perhaps I read about Chameleon and then Googled it and followed the Github link.

Evidently Mozilla recognizes the Dev. version as the correct extension, because when I go to the AMO page there's no option to install the release version. Looks like I'll have to uninstall the Dev. version first.

Yup, as soon as I uninstalled it I was able to add it.

Huh - all my settings were saved! 😎 I expected to have to redo them all. Is that because I didn't close/reopen Firefox?

[GitTheHellOutaHere]

Problem remains after switching to v0.20.23. 😖

[sereneblue]

Can you post your settings? I don't think there's much I can do until I can reproduce this issue.

[GitTheHellOutaHere]

1. I didn't know you were still interested since it seems to be an AdGuard issue.

2. I told you I reset ALL settings to unchecked/default/allow everything/real profile etc.

[GitTheHellOutaHere]

Just installed Chameleon 0.20.24 and one thing seems to have improved with Craigslist, but it's weird.

The problem still occurs with Random Profile enabled, even if every UA is excluded except for the closest one to my setup - macOS 13 Firefox 79.

But if I switch to Real Profile the problem is gone, even if I set Default Profile to any other UA AFAICT (I didn't try them all).

[GitTheHellOutaHere]

This might be something:

I went here to see what is revealed about my user agent.

With Real Profile selected, that site shows the wrong UA. I disabled Privacy Setting extension and quit AdGuard before checking , since they can both conceal the UA.

Only after disabling Chameleon does it show the correct OS and UA.

Chameleon should not conceal the UA when Real Profile is selected.

[sereneblue]

@GitTheHellOutaHere It looks like RFP is enabled; check about:config. If you modify preferences there, Chameleon doesn't know. That should be addressed in the next update.

[GitTheHellOutaHere]

If you're referring to blocking fingerprinting in Firefox prefs, then yes - it's definitely enabled.

I hadn't noticed before that enabling RFP in Chameleon or Privacy Settings does NOT enable it in the prefs. Why is that? Anyone enabling that option in extensions clearly wants to block fingerprinting.

They also don't have options to block miners - that's another important thing that must be checked in the prefs. Does Chameleon ignore those because they aren't privacy-related?

What's your thoughts on using Chameleon with Privacy Settings? Unnecessary or problematic redundancy?

[GitTheHellOutaHere]

I just answered that last question. The latest version of Chameleon does conflict with Privacy Settings, making it's settings unusable.

I've been using both together a long time and this is new. P.S. was last updated in Feb., so it isn't suddenly causing the problem.

With Chameleon enabled, nearly all of P.S.'s settings become disabled and the red ones can't be changed.

With Chameleon disabled, all the settings return to where I had them (the 2 red ones no longer work in this extension or I'd enable them too).

And this is odd: Chameleon, P.S. and FF prefs were all set to block all 3rd party trackers - have been for a long time.

But now with Chameleon enabled, P.S. switches to ACCEPT ALL cookies even though the prefs still show all 3rd party cookies are blocked.

And the websockets setting in Chameleon no longer sticks - it reverts to ALLOW ALL every time. Change it to a block setting, switch to Injection tab and then back, and the setting has reverted to ALLOW ALL. Oddly it does not change when switching to Cookie tab.

Same goes for Screen Size settings now. Change it to something, then switch to Standard tab & back to Injection tab and it's back to Default. But Cookie tab has no effect on it.

I closed & reopened FF just to see if it helped. It did not.

I think 0.20.24 is a regression.

[GitTheHellOutaHere]

I found another website that becomes unresponsive with Chameleon & AdGuard running. Disable either one and it's fine. https://www.techsmith.com/

Here's the main part of the Console.

GET https://www.techsmith.com/[HTTP/1.1 200 OK 699ms] GET https://d1f8f9xcsvx3ha.cloudfront.net/sbl/0.8.0/fastspring-builder.min.jsBlocked By Extension Cookie “incap_ses_891_1239953” will be soon rejected because it has the “sameSite” attribute set to “none” or an invalid value, without the “secure” attribute. To know more about the “sameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite www.techsmith.com Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://d1f8f9xcsvx3ha.cloudfront.net/sbl/0.8.0/fastspring-builder.min.js. (Reason: CORS request did not succeed).

GET https://fast.wistia.com/embed/medias/214buv4jow.jsonpBlocked By Extension GET https://fast.wistia.com/assets/external/E-v1.jsBlocked By Extension GET https://www.techsmith.com/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=1&cb=629448322[HTTP/1.1 200 OK 749ms] GET https://www.techsmith.com/includes/bootstrap.3.3.7.min.js[HTTP/1.1 304 Not Modified 302ms] GET https://www.techsmith.com/includes/videoplayer/embedded-smart-player.min.js[HTTP/1.1 304 Not Modified 106ms] GET https://local.adguard.org/?ts=1596647169365&name=AdGuard%20Popup%20Blocker&name=AdGuard%20Assistant&name=AdGuard%20Extra&type=user-script[HTTP/1.1 200 OK 54ms] GET https://www.techsmith.com/store/scripts/fastspring.js?a=200724[HTTP/1.1 304 Not Modified 655ms] GET https://www.techsmith.com/includes/composite.js?a=6372323831.5[HTTP/1.1 304 Not Modified 663ms] GET https://local.adguard.org/?ts=1596647169365&type=content-script&dmn=www.techsmith.com&css=1&js=1&gcss=1&rel=1&rji=1&stealth=1&uag=ghostery[HTTP/1.1 200 OK 123ms] GET https://www.googletagmanager.com/gtm.js?id=GTM-NS6863Blocked By Extension Loading failed for the Githubissues.

Githubissues is a development platform for aggregating issues.