Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Avatar for Username

Rechercher dans l’assistance

Évitez les escroqueries à l’assistance. Nous ne vous demanderons jamais d’appeler ou d’envoyer un SMS à un numéro de téléphone ou de partager des informations personnelles. Veuillez signaler toute activité suspecte en utilisant l’option « Signaler un abus ».

Learn More

Ce sujet de discussion a été archivé. Veuillez poser une nouvelle question si vous avez besoin d’aide.

CORS requests get an error and it breaks websites (twitter, tumblr, ...)

  • 3 réponses
  • 1 a ce problème
  • 4 vues
  • Dernière réponse par philipp

Xenthreaded
Xenthreaded
more options

Hello,

Until yesterday everything worked perfectly but today some websites that need cross origin request are broken.

For example, Twitter can't load scripts, images and videos from twimg.com and tumblr from media.tumblr and assets.tumblr ...

When I try to just open the image URLs, it says my connection is insecure without error codes.

and the console message redirect me to this : https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSDidNotSucceed which isn't very helpful

I'm on Linux (Arch) if that may be useful.

I tried to backup/delete the certificates but no changes.

So if anyone has an idea about what's happening I'll be glad to get some pointers to fix this problem.

Thanks

Hello, Until yesterday everything worked perfectly but today some websites that need cross origin request are broken. For example, Twitter can't load scripts, images and videos from twimg.com and tumblr from media.tumblr and assets.tumblr ... When I try to just open the image URLs, it says my connection is insecure without error codes. and the console message redirect me to this : https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS/Errors/CORSDidNotSucceed which isn't very helpful I'm on Linux (Arch) if that may be useful. I tried to backup/delete the certificates but no changes. So if anyone has an idea about what's happening I'll be glad to get some pointers to fix this problem. Thanks
Captures d’écran jointes

Solution choisie

hi, thanks for reporting - it seams to be a problem with the configuration of some cdn nodes that twitter (and some other sites) are using to propagate their content. we're tracking this in https://bugzilla.mozilla.org/show_bug.cgi?id=1488240

a temporary workaround for this until a general fix is in place would be switching security.tls.version.max in about:config to 3. however you should revert that after a couple of days, as it might be detrimental to security in the long term.

Lire cette réponse dans son contexte 👍 1

Toutes les réponses (3)

philipp
philipp
  • Moderator
more options

Solution choisie

hi, thanks for reporting - it seams to be a problem with the configuration of some cdn nodes that twitter (and some other sites) are using to propagate their content. we're tracking this in https://bugzilla.mozilla.org/show_bug.cgi?id=1488240

a temporary workaround for this until a general fix is in place would be switching security.tls.version.max in about:config to 3. however you should revert that after a couple of days, as it might be detrimental to security in the long term.

Xenthreaded
Xenthreaded Auteur de la question
more options

Thank you !

Is there a way I can stay informed of the progress of this bug ?

philipp
philipp
  • Moderator
more options

if you create an account on bugzilla you can follow that ticket and get email updates for new comments or a change is status there.