CSP prevents accessing blob:oursite.com, so logout is instant

  • Resolved alamana

    (@alamana)


    3 months, 2 weeks ago

    I think the plugin should handle cases where CSP lockdown prevents blobs from loading. Right now we’re forcibly logged out due to CSP rejecting the blob that the plugin tries to load.

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Author Deepen

    (@j_3rk)

    Hi there, I am not sure what you meant regarding blob that plugin tries to load. Can you give more details to this?

    Thread Starter alamana

    (@alamana)

    Thanks for your reply and for you great plugin. Unfortunately I don’t have the line numbers, but in one of the JS files from the plugin it tries to create a web worker or some sort of worker, and loading that counts as a blob.

    When it fails to load it seemingly causes the logout logic to trigger immediately. Disabling the plugin resolved the issue, and I’ve got it disabled for the time.

    Thank you again!

    Plugin Author Deepen

    (@j_3rk)

    Can you paste me some screenshots of this issue so that I can understand the situation. Free version only executes ajax request if set idle duration is met – If the request fails then logout should not happen as the logout code would never run so I am not sure where to check.

    Thread Starter alamana

    (@alamana)

    Thank you again for your reply. I hope this image will be helpful.

    After one or two page navigations, the session is logged out.

    Thread Starter alamana

    (@alamana)

    I see WordPress image upload failed. Please see here: https://imgur.com/a/fkQKjbB

    Plugin Author Deepen

    (@j_3rk)

    Hi there,

    Appreciate the details. I was able to narrow down the issue. This should be fixed in version 3.4.1 – Let me know here if otherwise. Thanks!

    Thread Starter alamana

    (@alamana)

    Seems to work great! Thank you very much again!

Viewing 7 replies - 1 through 7 (of 7 total)
  • You must be logged in to reply to this topic.