New issue
Advanced search Search tips

Issue 859781 link

Starred by 1 user
Status: Assigned
Owner:
ihf@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Compat



Sign in to add a comment

Crunchyroll's free streaming broken by cross-origin content blocking

Reported by khym.cha...@gmail.com, Jul 3 
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36

Example URL:
http://www.crunchyroll.com/natsume-yujin-cho/episode-1-the-cat-and-the-book-of-friends-515654

Steps to reproduce the problem:
1. Go to the given URL, either while not logged into Crunchyroll or with a non-paid account.

What is the expected behavior?
Video plays.

What went wrong?
Video doesn't play.

Does it occur on multiple sites: No

Is it a problem with a plugin? Yes Flash

Did this work before? Yes 

Does this work in other browsers? Yes

Chrome version: 67.0.3396.99  Channel: stable
OS Version: Fedora 28
Flash Version: 

The console gives the warning:

"Cross-origin plugin content from  must have a visible size larger than 400 x 300 pixels, or it will be blocked. Invisible content is always blocked."

However, the object element is larger that 400x300:

<object type="application/x-shockwave-flash" id="showmedia_video_player" style="display: block; visibility: visible;" data="http://static.ak.crunchyroll.com/vendor/StandardVideoPlayer-10dff2a.swf" width="640" height="389">

There's two "Failed to load resource" errors before the cross-origin warning, so that might be the cause of the problem.

Comment 1 by khym.cha...@gmail.com, Jul 3 

The problem goes away if I try with a brand new profile.  Things that haven't worked to fix my default profile:

* Turning off extensions.
* Turning off experiments.
* Manually removing Crunchyroll IndexedDB and Flash data (between browser restarts; that is, not while the browser was running).
* Clearing the cache and hosted app data.
* Deleting all Crunchyroll cookies and trying again.

Comment 2 by alex...@chromium.org, Jul 3

Components: Internals>Plugins>Flash
Owner: tommycli@chromium.org
Status: Untriaged (was: Unconfirmed)
Over to tommycli@, who added the 400x300 warning in r495595.  Any ideas on what might be going on here?  This didn't repro for me on Linux M67 stable, but strangely it did repro on a local ToT build (with Flash enabled via --ppapi-flash-version and --ppapi-flash-path flags).  I checked whether this is a site isolation issue, but the video still doesn't play with --disable-site-isolation-trials.

Comment 3 by khym.cha...@gmail.com, Jul 5 

I tracked the problem down to the Flash settings file, that is, the file with the following path:

".config/google-chrome/Default/Pepper Data/Shockwave Flash/WritableRoot/#SharedObjects/62Z9KMAF/macromedia.com/support/flashplayer/sys/settings.sol"

If I delete settings.sol and restart Chrome then the problem goes away.  If I restore the previous version and restart the problem comes back.

Attached is a copy of settings.sol that causes the problem

Also, I misidentified the problem: the cross-origin warning is given even when the video plays properly.

Comment 4 by tommycli@chromium.org, Jul 20

Owner: ihf@chromium.org
Re c#3, I think the settings.sol attachment got lost.

Since it seems to be affected by the Flash internal settings, I'll pass this along to ihf.

Comment 5 by khym.cha...@gmail.com, Jul 21 

I might have messed up attaching the settings.sol; here it is again.
settings.sol
1.7 KB Download

Comment 6 by benhenry@chromium.org, Aug 3

Status: Assigned (was: Untriaged)
This bug has an owner, thus, it's been triaged. Changing status to "assigned".
►

Sign in to add a comment