New issue
Advanced search Search tips

Issue 707917 link

Starred by 3 users

Issue metadata

Status: Available
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: 2018-05-30
OS: Linux , Android , Windows , Chrome , Mac
Pri: 2
Type: Bug-Regression



Sign in to add a comment

Browser ignores extension permission of "http://*/"

Reported by carni...@gmail.com, Apr 3 2017

Issue description

UserAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:52.0) Gecko/20100101 Firefox/52.0

Steps to reproduce the problem:
1. Clear the browser's cache and exit the browser
2. Start the browser and install the attached Chrome extension
3. Visit http://www.tamarack-software.com/tgptest

What is the expected behavior?
The file http://www.tamarack-software.com/files/versioninfo.wtk is downloaded by the extension.

What went wrong?
The browser console shows the error message "XMLHttpRequest cannot load http://www.tamarack-software.com/files/versioninfo.wtk.  No 'Access-Control-Allow-Origin' header is present on the requested resource.  Origin 'chrome-extension://lhojjcofegcnofaknffnhbgmgbgonpdb' is therefore not allowed access."

Did this work before? Yes Uncertain

Does this work in other browsers? Yes

Chrome version: 57.0.2987.113  Channel: stable
OS Version: 7
Flash Version: 

This is a regression from earlier versions of the browser.  In particular, I can confirm that the behavior is not present in 49.0.2623.112, but is present in 56.0.2924 and newer.  Based on the timing of bug reports I've received, I suspect the breakage happened sometime between version 55 and 56.

The behavior is intermittent and may be related to caching.  In particular, re-loading the page permits a subsequent request for the file to succeed, while applying anti-caching techniques cause requests for the file to always fail.

This may be related to this report on StackOverflow: http://stackoverflow.com/questions/38770686/chrome-extension-suddenly-shows-cross-origin-error
 
nptgeq_extension-1.2-minimal-example.zip
13.9 KB Download
Labels: Needs-Triage-M57
Components: Platform>Extensions Blink>Network>XHR
Labels: -Hotlist-Interop
Components: Blink>SecurityFeature

Comment 4 by mkwst@chromium.org, Apr 5 2017

Cc: rdevlin....@chromium.org
Components: -Blink>SecurityFeature Internals>Network>Cache Blink>SecurityFeature>CORS
Labels: OS-Android OS-Chrome OS-Linux OS-Mac
Owner: tyoshino@chromium.org
Status: Available (was: Unconfirmed)
tyoshino@: Can you triage this?

rdevlin.cronin@: FYI, though this sounds more like a cache issue than an extensions issue.
Note that the post says that applying anti-caching tests cause the requests to fail, not the other way around, so it seems like the cache somehow has a working copy of the resource, but requests that go over the network fail CORS checks...Right?  Not seeing how that could be a cache issue.

Comment 6 by est...@chromium.org, Nov 10 2017

Labels: Hotlist-EnamelAndFriendsFixIt

Comment 7 by est...@chromium.org, Feb 18 2018

Labels: -Hotlist-EnamelAndFriendsFixIt
Owner: ----
Needs priority review and reassigning.

Comment 9 by ricea@chromium.org, Mar 30 2018

Components: -Blink>Network>XHR
This issue has too many components to make progress. Gonna trim XHR for starters.
Components: -Internals>Network>Cache
Labels: Needs-Feedback
NextAction: 2018-05-30
http://www.tamarack-software.com/files/versioninfo.wtk is successfully downloaded with Version 65.0.3325.181 (Official Build) (64-bit). Is this issue fixed?
(It's possible this is dup of  issue 680320 .)
Labels: OOR-CORS
Add OOR-CORS label to check later.
The NextAction date has arrived: 2018-05-30

Comment 15 by carni...@gmail.com, May 30 2018

I can't reproduce it with 66.0.3359.117.

(The timing is wrong for this to be a duplicate of 680320: the problem didn't start until after that bug was fixed.)

Sign in to add a comment