access denied after firefox update
access denied after firefox update
updated firefox to 72.0.1
NoScripts 11.0.11
now get access errors:
Access Denied
You don't have permission to access "http://www.costco.com/laptops.html" on this server.
Reference #18.b36b9d0.1578721360.c8246cc2
address bar clearly shows
https://www.costco.com/laptops.html
can only get to site if I disable noscripts.
This has happened in the past and seemed corrected, WTF
NoScripts 11.0.11
now get access errors:
Access Denied
You don't have permission to access "http://www.costco.com/laptops.html" on this server.
Reference #18.b36b9d0.1578721360.c8246cc2
address bar clearly shows
https://www.costco.com/laptops.html
can only get to site if I disable noscripts.
This has happened in the past and seemed corrected, WTF
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0
Re: access denied after firefox update
forgot my login and posted with other user id, this is my user id
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0
Re: access denied after firefox update
Oh, I'm definitely wrong on that, aren't I!Confirmed.
But it must be a general website issue with Costco itself.
Now, I've got to remember just where I saw that me that message & what the cause was?
Ah, what was it?Access Denied
You don't have permission to access "http://www.costco.com/laptops.html" on this server.
Reference #18.45273017.1578748005.187155c
Useragents? Cookies?
Are you using Private Browsing (which changes your UA)?
(These days, Mozilla does so much crap - on its own, like changing your UA if you use Private Browsing, or its' "tracking protection" - with no clear, easy way to disable, bypass, override, it makes using the web far more difficult - when then web doesn't coincide with the masters rules.)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.5
Re: access denied after firefox update
Fixed.
I can access that site fine with NoScript 11.0.12rc2.
Does it work for you with NoScript 11.0.12rc2?
Does it work for you with NoScript 11.0.12rc2 on Firefox 68 ESR?
*Always* check the changelogs BEFORE updating that important software!
-
Re: access denied after firefox update
No, there is an issue.
Whether NoScript is exacerbating the issue or not, not sure?
It might just be a (general browser) settings (cookie, UA, "privacy" setting) issue?
I actually saw it in multiple browsers (FF & SeaMonkey) - all of which are running NoScript, perhaps in Private Browsing (or not), & that is why I initially (incorrectly) thought it was a site issue.
Something along these lines, https://forum.palemoon.org/viewtopic.ph ... 18#p146118.
And now, in FF, with NoScript, in regular, in Private Browsing, I've had instances where the site loads, & instances where the site fails (with the above message).
(PS: In FF Nightly, when you want to change the UA - you now need an extension. [Wonderful.])
Whether NoScript is exacerbating the issue or not, not sure?
It might just be a (general browser) settings (cookie, UA, "privacy" setting) issue?
I actually saw it in multiple browsers (FF & SeaMonkey) - all of which are running NoScript, perhaps in Private Browsing (or not), & that is why I initially (incorrectly) thought it was a site issue.
Something along these lines, https://forum.palemoon.org/viewtopic.ph ... 18#p146118.
And now, in FF, with NoScript, in regular, in Private Browsing, I've had instances where the site loads, & instances where the site fails (with the above message).
(PS: In FF Nightly, when you want to change the UA - you now need an extension. [Wonderful.])
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.5
Re: access denied after firefox update
Not a NoScript issue.
Not an "after FF update" issue.
Duplicated in a (mostly ) new SeaMonkey Profile - that never had NoScript installed (yes, I know, heresy).
(I have been jumping between SeaMonkey 2.49 & 2.53 - with that same Profile, if that matters, with two differing UA, if that matters:
Mozilla/4.0 (Windows NT 6.1; Win64; x64; rv:56.0) 20100101 SeaMonkey/2.35.1
vs
Mozilla/4.0 (Windows NT 6.1; Win64; x64; rv:56.0) 20100101 SeaMonkey/2.35.1 Lightning/5.8.1)
Not an "after FF update" issue.
Duplicated in a (mostly ) new SeaMonkey Profile - that never had NoScript installed (yes, I know, heresy).
(I have been jumping between SeaMonkey 2.49 & 2.53 - with that same Profile, if that matters, with two differing UA, if that matters:
Mozilla/4.0 (Windows NT 6.1; Win64; x64; rv:56.0) 20100101 SeaMonkey/2.35.1
vs
Mozilla/4.0 (Windows NT 6.1; Win64; x64; rv:56.0) 20100101 SeaMonkey/2.35.1 Lightning/5.8.1)
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:52.0) Gecko/20100101 Firefox/52.0 SeaMonkey/2.49.5
Re: access denied after firefox update
Maybe ? NoScript is playing exacerbating things here, in this instance?
URL: https://www.lowes.com/
NoScript installed, scripts blocked.
Chrome (Chromium, Edge), FF.
If lowes loads, refresh the page.
Gives you - perhaps:
You don't have permission to access "http://www.lowes.com/" on this server.
Reference #...
Maybe cookies or tracking protection too are involved?
Once you get the "you don't have permissions", even disabling NoScript might not get you anything - until cookies are cleared?
If you happen to get things to work - with NoScript, site might not work with scripts block, might might not work with allow all this tab, but site may work with allow globally?
Seems like some cookie (tracking, I'm sure), or something, somewhere is begin set, outside of "lowes" that lowes (costco, particular sites, ...) are relying upon & when not seen drop you to "you don't have permission...".
igodigital.com
lowes.com
www.lowes.com
lpcdn.lpsnmedia.net
consent-st.trustarc.com
URL: https://www.lowes.com/
NoScript installed, scripts blocked.
Chrome (Chromium, Edge), FF.
If lowes loads, refresh the page.
Gives you - perhaps:
You don't have permission to access "http://www.lowes.com/" on this server.
Reference #...
Maybe cookies or tracking protection too are involved?
Once you get the "you don't have permissions", even disabling NoScript might not get you anything - until cookies are cleared?
If you happen to get things to work - with NoScript, site might not work with scripts block, might might not work with allow all this tab, but site may work with allow globally?
Seems like some cookie (tracking, I'm sure), or something, somewhere is begin set, outside of "lowes" that lowes (costco, particular sites, ...) are relying upon & when not seen drop you to "you don't have permission...".
igodigital.com
lowes.com
www.lowes.com
lpcdn.lpsnmedia.net
consent-st.trustarc.com
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0 SeaMonkey/2.53.2 Lightning/5.8.1
Re: access denied after firefox update
allow globally
visit www.lowes.com
refresh page
block normally (unset allow globally)
remove all cookies
visit www.lowes.com
refresh page
at that point, lowes.com does not load
allow all this page
lowes does not load
unset allow all this page
lowes does not load
allow globally
lowes does not load
unset allow globally
remove all cookies
lowes loads
refresh page
lowes does not load
remove all cookies
allow all this page
load lowes.com
lowes loads
refresh page
lowes does not load
unset allow all this page
at this point, the only cookies you have are lowes.com & www.lowes.com
allow globally
visit lowes.com
does not load
refresh page
does not load
still, the only cookies you have are lowes.com & www.lowes.com
clear all cookies
(noscript is still allow globally at this point)
visit lowes.com
page loads
refresh
page loads
unset allow globally
page loads
refresh
page loads
remove igodigital.com cookie
at this point, the only cookies are lowes.com & www.lowes.com
refresh lowes.com
loads
allow all this page
refresh
loads
unset allow all this page
refresh
loads
allow globally
refresh
loads
unset allow globally
refresh
loads
at this point, all combinations work
remove all cookies
refresh
FAILS
So it seems that NoScript is having some effect on what happens.
And that can depend on what may or may not have happened - somewhere along the line - with cookies (in the most simple case).
visit www.lowes.com
refresh page
block normally (unset allow globally)
remove all cookies
visit www.lowes.com
refresh page
at that point, lowes.com does not load
allow all this page
lowes does not load
unset allow all this page
lowes does not load
allow globally
lowes does not load
unset allow globally
remove all cookies
lowes loads
refresh page
lowes does not load
remove all cookies
allow all this page
load lowes.com
lowes loads
refresh page
lowes does not load
unset allow all this page
at this point, the only cookies you have are lowes.com & www.lowes.com
allow globally
visit lowes.com
does not load
refresh page
does not load
still, the only cookies you have are lowes.com & www.lowes.com
clear all cookies
(noscript is still allow globally at this point)
visit lowes.com
page loads
refresh
page loads
unset allow globally
page loads
refresh
page loads
remove igodigital.com cookie
at this point, the only cookies are lowes.com & www.lowes.com
refresh lowes.com
loads
allow all this page
refresh
loads
unset allow all this page
refresh
loads
allow globally
refresh
loads
unset allow globally
refresh
loads
at this point, all combinations work
remove all cookies
refresh
FAILS
So it seems that NoScript is having some effect on what happens.
And that can depend on what may or may not have happened - somewhere along the line - with cookies (in the most simple case).
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0 SeaMonkey/2.53.2 Lightning/5.8.1
Re: access denied after firefox update
If the site is in a non-working state
If the site is not allowed
You get a lot of Content Security Policy: messages
? Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”).
They reference many parts of code
?
With webconsole open, you do not get the message, "Access Denied You don't have permission to..."
But the page is "blank"
If you then clear the items in Storage, whatever it may show in use
And then Allow costco.com, the page loads
Console does not show CSP messages
If the site is in a working state
Dis-allow the site (in NoScript)
Console may then fill up with messages
If not, try clearing Storage data, again & refresh the page
A second refresh may be required
If not, fart around some more & you'll get it to break
If the site is not allowed
You get a lot of Content Security Policy: messages
? Content Security Policy: The page’s settings blocked the loading of a resource at inline (“script-src”).
They reference many parts of code
?
Code: Select all
<script>
$.cookie('invCheckPostalCode','', {path:'/',domain:'.costco.com', expires:-1});
$.cookie('invCheckStateCode','', {path:'/',domain:'.costco.com', expires:-1});
</script>
But the page is "blank"
If you then clear the items in Storage, whatever it may show in use
And then Allow costco.com, the page loads
Console does not show CSP messages
If the site is in a working state
Dis-allow the site (in NoScript)
Console may then fill up with messages
If not, try clearing Storage data, again & refresh the page
A second refresh may be required
If not, fart around some more & you'll get it to break
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0 SeaMonkey/2.53.2 Lightning/5.8.1
Re: access denied after firefox update
similar may be occurring with a (url bar) google search - in a private window ?
dis-allow google.com
open a private window
paste in (the url bar), https://www.google.com/search?client=firefox-b-1-d&q=noscript+extension
or, type in, noscript extension
& hit return
Results:
(notice a flash, where the page "displays" - for an instant, then "rolls over" to a "blank" page)
"Nightly prevented this page from automatically redirecting to another page."
console: lots of CSP warnings
(perhaps something to do with Accessibility ?)
the "Nightly prevented..." message has an 'Allow' button
allowing then opens, https:// www.google.com/search?q=noscript+extension&client=firefox-b-1-d&gbv=1&sei=XABBXujuCLOrytMPp8WFwA8
so the search changed from
?client=firefox-b-1-d&q=noscript+extension
to
?q=noscript+extension&client=firefox-b-1-d&gbv=1&sei=XABBXujuCLOrytMPp8WFwA8
dis-allow google.com
open a private window
paste in (the url bar), https://www.google.com/search?client=firefox-b-1-d&q=noscript+extension
or, type in, noscript extension
& hit return
Results:
(notice a flash, where the page "displays" - for an instant, then "rolls over" to a "blank" page)
"Nightly prevented this page from automatically redirecting to another page."
console: lots of CSP warnings
(perhaps something to do with Accessibility ?)
the "Nightly prevented..." message has an 'Allow' button
allowing then opens, https:// www.google.com/search?q=noscript+extension&client=firefox-b-1-d&gbv=1&sei=XABBXujuCLOrytMPp8WFwA8
so the search changed from
?client=firefox-b-1-d&q=noscript+extension
to
?q=noscript+extension&client=firefox-b-1-d&gbv=1&sei=XABBXujuCLOrytMPp8WFwA8
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0 SeaMonkey/2.53.2 Lightning/5.8.1
Re: access denied after firefox update
restart FF in safe mode
set, javascript.enabled;false
open a private window
type in, noscript extension, into the url bar
hit return
Results:
"Nightly prevented this page from automatically redirecting to another page." (along with an 'Allow' button)
the page itself displays, "Please click here if you are not redirected within a few seconds."
console: is clean, not spammed
set, javascript.enabled;false
open a private window
type in, noscript extension, into the url bar
hit return
Results:
"Nightly prevented this page from automatically redirecting to another page." (along with an 'Allow' button)
the page itself displays, "Please click here if you are not redirected within a few seconds."
console: is clean, not spammed
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0 SeaMonkey/2.53.2 Lightning/5.8.1
-
- Master Bug Buster
- Posts: 244
- Joined: Wed Jan 10, 2018 7:37 am
Re: access denied after firefox update
Here's what happens to me:
Javascript enabled:
Blocking cookies for costco.com works around the problem, but don't expect to do any shopping like that.
Javascript enabled:
- https://www.costco.com/laptops.html loads fine the first time and any subsequent reloads.
- First time open (cookies and cache cleared) - site loads fine (seems blank but the content is there hidden by CSS).
- After reload will give the "Access Denied" page. Enabling scripting at this point does not help, unless cookies and cache are cleared.
Blocking cookies for costco.com works around the problem, but don't expect to do any shopping like that.
Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0