Opened 16 months ago

Closed 7 months ago

#25743 closed defect (wontfix)

Orfox users are not able to open cloudflare protected sites

Reported by: igt0 Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-usability-website, tbb-mobile
Cc: dmr Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description (last modified by gk)

When an user using the Tor Network tries to access CloudFlare protected websites such as laravel.com and upwork.com a captcha website opens however the captcha image doesn't render.

Child Tickets

Change History (6)

comment:1 Changed 16 months ago by igt0

The same problem also happens in Tor Browser Desktop and Firefox Quantum (the browser must be using the Tor Network) if the general.useragent.override value is changed to:

Mozilla/5.0 (Android; Mobile; rv:59.0) Gecko/59.0 Firefox/59.0

Last edited 16 months ago by igt0 (previous) (diff)

comment:2 Changed 16 months ago by igt0

The following request fails:

GET /recaptcha/api2/payload?c=03AJIzXZ6YxK1tlhBPjLCzqtooFwk6Kaifh4B6wa-PKfvpte4m-nYA8OKMlCBDlKz_lP5h2pOaUSiouDTE837-SBqoFyzlv3uKGl0qEf-gbsM7FGxA5MT-5zNQ59JwqK6GFmTYcO8ZmsZfrWC2gyO-w3HlG3TujGlFOJedIoVVJkRFQzPKKUYV5hUzpULuMfaFDZHDIWjP0qC3RJRduNPdrfk7PdqzLKrQv9tnf-_XVShBZMt2vK0bB4YfKQ4Q4KwYuox4JGRE1aBb&k=6LfBixYUAAAAABhdHynFUIMA_sa4s-XsJvnjtgB0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Android; Mobile; rv:59.0) Gecko/59.0 Firefox/59.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/recaptcha/api/fallback?k=6LfBixYUAAAAABhdHynFUIMA_sa4s-XsJvnjtgB0
Connection: keep-alive

With 400 error:

HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 09 Apr 2018 14:43:56 GMT
Expires: Mon, 09 Apr 2018 14:43:56 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303432; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="42,41,39,35"
Transfer-Encoding: chunked

comment:3 Changed 16 months ago by gk

Description: modified (diff)
Summary: Orfox users are not able to open cloudfront protected sitesOrfox users are not able to open cloudflare protected sites

Changed cloudfront -> cloudflare (as I assume the latter is meant).

comment:4 Changed 14 months ago by dmr

Cc: dmr added
Keywords: tbb-usability-website added

comment:5 Changed 14 months ago by dmr

Keywords: tbb-mobile added

Oops, also mobile-specific.

comment:6 Changed 7 months ago by gk

Resolution: wontfix
Status: newclosed

We are closer to moving Orfox users to Tor Browser for Android. We therefore won't spend time investigatig and fixing Orfox bugs anymore.

Note: See TracTickets for help on using tickets.