Opened 3 years ago

Closed 23 months ago

#25743 closed defect (wontfix)

Orfox users are not able to open cloudflare protected sites

Reported by: igt0 Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords: tbb-usability-website, tbb-mobile
Cc: dmr Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description (last modified by gk)

When an user using the Tor Network tries to access CloudFlare protected websites such as laravel.com and upwork.com a captcha website opens however the captcha image doesn't render.

Child Tickets

Change History (6)

comment:1 Changed 3 years ago by igt0

The same problem also happens in Tor Browser Desktop and Firefox Quantum (the browser must be using the Tor Network) if the general.useragent.override value is changed to:

Mozilla/5.0 (Android; Mobile; rv:59.0) Gecko/59.0 Firefox/59.0

Last edited 3 years ago by igt0 (previous) (diff)

comment:2 Changed 3 years ago by igt0

The following request fails:

GET /recaptcha/api2/payload?c=03AJIzXZ6YxK1tlhBPjLCzqtooFwk6Kaifh4B6wa-PKfvpte4m-nYA8OKMlCBDlKz_lP5h2pOaUSiouDTE837-SBqoFyzlv3uKGl0qEf-gbsM7FGxA5MT-5zNQ59JwqK6GFmTYcO8ZmsZfrWC2gyO-w3HlG3TujGlFOJedIoVVJkRFQzPKKUYV5hUzpULuMfaFDZHDIWjP0qC3RJRduNPdrfk7PdqzLKrQv9tnf-_XVShBZMt2vK0bB4YfKQ4Q4KwYuox4JGRE1aBb&k=6LfBixYUAAAAABhdHynFUIMA_sa4s-XsJvnjtgB0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Android; Mobile; rv:59.0) Gecko/59.0 Firefox/59.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/recaptcha/api/fallback?k=6LfBixYUAAAAABhdHynFUIMA_sa4s-XsJvnjtgB0
Connection: keep-alive

With 400 error:

HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 09 Apr 2018 14:43:56 GMT
Expires: Mon, 09 Apr 2018 14:43:56 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: hq=":443"; ma=2592000; quic=51303432; quic=51303431; quic=51303339; quic=51303335,quic=":443"; ma=2592000; v="42,41,39,35"
Transfer-Encoding: chunked

comment:3 Changed 3 years ago by gk

Description: modified (diff)
Summary: Orfox users are not able to open cloudfront protected sitesOrfox users are not able to open cloudflare protected sites

Changed cloudfront -> cloudflare (as I assume the latter is meant).

comment:4 Changed 2 years ago by dmr

Cc: dmr added
Keywords: tbb-usability-website added

comment:5 Changed 2 years ago by dmr

Keywords: tbb-mobile added

Oops, also mobile-specific.

comment:6 Changed 23 months ago by gk

Resolution: wontfix
Status: newclosed

We are closer to moving Orfox users to Tor Browser for Android. We therefore won't spend time investigatig and fixing Orfox bugs anymore.

Note: See TracTickets for help on using tickets.