search

superfeedr / subtome

A universal Subscribe/Follow button.
http://subtome.com
MIT License
166 stars 32 forks source link

Getting "The operation is insecure" #89

Open singpolyma opened 8 years ago

singpolyma commented 8 years ago

In my console when clicking the follow links I added at https://singpolyma.net/

singpolyma commented 8 years ago

Also getting:

Error: [$injector:cdep] Circular dependency found:

singpolyma commented 8 years ago

It seems likely this is some sort of firefox version compatibility issue.

singpolyma commented 8 years ago

I also see "There was an error, so we could not load the services from the localStorage. " -- and the reason given is the security reason from above. Since it works on subtome.com but not on other domains I try (my site or http://voxpelli.com/) I am suspecting a same-origin interaction with localStorage?

voxpelli commented 8 years ago

I can't reproduce this in my Firefox, so seems like a pretty nasty problem.

singpolyma commented 8 years ago

If I just add an iframe to the DOM of any site with https://www.subtome.com/?subs/#/subscribe?resource=https:%2F%2Fsingpolyma.net%2Ffeed%2F as the src, I reproduce on my browser

singpolyma commented 8 years ago

I have to set "Accept third party cookies" to "always" and then the issue goes away.

singpolyma commented 8 years ago

So, it would be nice if this error didn't cause the whole UI to just not render at all, makes the site look broken

singpolyma commented 8 years ago

Relevant ticket that introduced this behaviour to firefox: https://bugzilla.mozilla.org/show_bug.cgi?id=536509

singpolyma commented 8 years ago

This is very related to, and may be the same as, #75

singpolyma commented 8 years ago

My preferred fallback (if nothing useful can be rendered, though probably we can, just can't show the user's preferences so it's always like they're new, which would be fine) would be to window.location = resource

julien51 commented 8 years ago

Wow. This seems nasty. I think that indeed this is in the way FF handles cookies and localstorage. Please, feel free to submit a PR that shows the issue in the UI rather than just in the console... at least this will help us guide people!