ATTN GIORGIO: ABE: 'Logout' action doesn't work

Discussions about the Application Boundaries Enforcer (ABE) module
Guest

ATTN GIORGIO: ABE: 'Logout' action doesn't work

Post by Guest »

Hello,

basically, this is a rule I'm using:

Code: Select all

Site example.org
Accept from SELF
Logout GET
Deny
The idea behind this rule is that the site may make requests to itself, cross-site GET requests are stripped of credentials and every other CS request is blocked.

The problem: Each time the Logout action would apply, the request is stopped and no notification is displayed. In the console (Messages), I found this:

Code: Select all

[NoScript XSS] xss.reason.[Exception... "Component returned failure code: 0x804b000f (NS_ERROR_IN_PROGRESS) [nsIHttpChannel.setRequestHeader]"  nsresult: "0x804b000f (NS_ERROR_IN_PROGRESS)"  location: "JS frame :: chrome://noscript/content/ABE.js :: anonymous :: line 490"  data: no] --- undefined
Am I doing something wrong here? :|
Last edited by Tom T. on Thu Jul 02, 2009 8:45 am, edited 1 time in total.
Reason: flag for giorgio's attention
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0 (.NET CLR 3.5.30729)
Tom T.
Field Marshal
Posts: 3620
Joined: Fri Mar 20, 2009 6:58 am

Re: ATTN GIORGIO: ABE: 'Logout' action doesn't work

Post by Tom T. »

Bumped and flagged this for Giorgio's attention. Thanks for your patience.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US at an expert level; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20 diehard
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: ATTN GIORGIO: ABE: 'Logout' action doesn't work

Post by Giorgio Maone »

Looks like a bug due to the request being processed too late for modifying headers if its DNS entry is not cached yet.
Thanks for reporting, it will be fixed in next release.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1) Gecko/20090624 Firefox/3.5 (.NET CLR 3.5.30729)
Post Reply