webcompat / web-bugs

A place to report bugs on websites.
https://webcompat.com
Mozilla Public License 2.0
731 stars 63 forks source link

lego.com - Secure connection fails #134957

Open zaxonspox opened 4 months ago

zaxonspox commented 4 months ago

URL: https://lego.com

Browser / Version: Firefox 124.0 Operating System: Ubuntu Tested Another Browser: Yes Chrome

Problem type: Something else Description: connection not secured (lost while browsing site) Steps to Reproduce: Site uses AJAX to load text and Images on pages (prev., next), after 2 loads website is loosing secure connection (any subpage does not loading)

View the screenshot Screenshot
Browser Configuration
  • None

From webcompat.com with ❤️

softvision-raul-bucata commented 4 months ago

We appreciate your report. I was not able to reproduce the issue following the steps to reproduce. The page loads as expected:

Screenshot from 2024-03-22 14-56-43 Screenshot from 2024-03-22 14-57-52

Tested with:

Browser / Version: Firefox Release 124.0 (64-bit) Operating System: Ubuntu 22.4 LTS x64

Suggestion: Try clearing cache/data/cookies, disabling add-ons and Ad-blocker (if available) and extensions or use a clean profile, and check again? If there are any changes made to the default settings of the browser (e.g. in about:config) please revert to the default settings and try again. Also, have the required cookies been accepted for this page?

[qa_12/2024]

zaxonspox commented 4 months ago

Hello, maybe my description was not clear enough (my fault). "Suggestion: Try clearing cache/data/cookies" - this is what i always check & do. To fully reproduce:

  1. Visit lego.com website
  2. Pick Buy link (Kupuj)
  3. Pick any category (i.e: Bestsellers, Newest, Sale)
  4. Go from 1st page to 2nd page
  5. 2nd page stops loading (ajax) photos
  6. go to 3rd page - loading (ajax) next page fails completely (no products even with text)

Ubuntu 22.04 (was on laptop, was on PC, was on VirtualBox) Firefox DEB version (NOT snap)

Zrzut ekranu z 2024-03-22 21-38-53

zaxonspox commented 4 months ago

And one more screenshot with WebTools - network Tab: Zrzut ekranu z 2024-03-22 21-56-46

GiittyUp24 commented 4 months ago

I have this same issue on Win 10 starting with maybe Firefox 120. (It has been a problem for months, but I'm not exactly sure when.) Waterfox G6.0.x also has this problem. Edge does not have this problem. I've had it take more take two more pages before images start to fail, but it will happen. Once it does, going to any page takes 10-15 seconds before getting "Server failed. Unable to verify authenticity."

I assume that the image server is failing first with the same error and then the main server finally fails.

Note I also reported this issue via the browser compatibility option at about this same time as this was reported.

softvision-raul-bucata commented 4 months ago

Thanks for that, but I am still unable to reproduce. What I would do usually to test this kind of issue, is:

  1. Type about:profiles in the url bar.
  2. Choose Create a new profile.
  3. Call it deleteme or anything you please.
  4. Then start it. (this way you will be sure that nothing is interfering, no ghost caching etc.)- make sure account sync is not performed, as the extensions will be imported in the new profile.
  5. Test.

Note: You can return to your old profile at any given time by accessing "about:profiles" in the address bar

[inv_13/2024]

GiittyUp24 commented 4 months ago

I have created a new profiles and tested. This has produced the same (wrong) results. To be more explicit in testing do the following:

  1. Go to shop.lego.com
  2. Answer the pop-up (you don't want to play).
  3. Answer cookie pop-up
  4. Go to a page that displays a large number of sets. For example, from the site menu bar, choose SHOP->Sets by theme->City
  5. A proper page should display with no issue
  6. Scroll down to the page flip menu (< 1 2 3 ... >)
  7. Select a number or ">"
  8. New sets will load with missing images.
  9. You should see a page like the screen shots above.
  10. If you don't see the broken page, flip to another page of sets until you do.
  11. Click in the area where a product image should be.
  12. The Lego site will return an error page. "Looks like something has gone wrong."
  13. Click the Home button on the page.
  14. After about 6-7 seconds the browser returns: Secure Connection Failed An error occurred during a connection to www.lego.com
    • The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    • Please contact ...
  15. Selecting the "Try again" button. When I did, I successfully loaded a page.

I kept trying and things seem to work better in the new profile (less image breaking) but it still happening. When I get the "Secure Connection Failed" page, hitting "Try Again" sometimes works and sometimes returns another "Secure Connection Failed" page.

As previously mentioned, Waterfox displays these same issues. Waterfox tracks the Firefox engine closely and updates their browser shortly after Firefox does. For example, a few days after FF 124 came out, Waterfox rev'ed to G6.0.10 claiming to have patched all issues from Security Advisory 2024-13.

As also mentioned, Edge does not display any of these issues at any time.

softvision-raul-bucata commented 4 months ago

@sv-calin Can you take a look, please?

[inv_13/2024]

sv-calin commented 4 months ago

I was able to reproduce the issue. Similar to @GiittyUp24 's STR I did the following:

  1. Go to https://www.lego.com/en-us
  2. Click "Continue" on the lego pop-up.
  3. Dismiss the cookie banner.
  4. Click on SHOP>Sets by theme>City.
  5. Scroll down the page.
  6. Switch between pages until some products appear without an image.
  7. Refresh the page.

https://github.com/webcompat/web-bugs/assets/107036654/2956703c-1411-416a-92af-d44c39d30334

Tested on: • Browser / Version: Firefox Nightly 126.0a1 (2024-03-31) / Firefox Release 124.0.1 / Chrome 123.0.6312.86 • Operating System: Windows 10 / Ubuntu 22.04 LTS

Notes:

  1. Reproducible on both Firefox Release and Nightly (regardless of the ETP status)
  2. Not reproducible on Chrome

Moving to Needsdiagnosis.

[inv_14/2024]