keepassxc-browser
keepassxc-browser copied to clipboard
Problem logging into obywatel.ufg.pl - Polish gov. site about car insurance
That is what I was able to get from JS console in firefox:
Security Error: Content at https://obywatel.ufg.pl/powiadomienia may not load or link to moz-extension://a904e032-5fa9-4784-80a2-d48c905260a9/content/62.32ff1b88b694850b.js.
<script> source URI is not allowed in this document: “moz-extension://a904e032-5fa9-4784-80a2-d48c905260a9/content/62.32ff1b88b694850b.js”. powiadomienia:1:1
Security Error: Content at https://obywatel.ufg.pl/powiadomienia may not load or link to moz-extension://a904e032-5fa9-4784-80a2-d48c905260a9/content/895.58cb473545e7de0f.js.
<script> source URI is not allowed in this document: “moz-extension://a904e032-5fa9-4784-80a2-d48c905260a9/content/895.58cb473545e7de0f.js”. powiadomienia:1:1
Security Error: Content at https://obywatel.ufg.pl/powiadomienia may not load or link to moz-extension://a904e032-5fa9-4784-80a2-d48c905260a9/content/471.04f0d4e7b5608725.js.
<script> source URI is not allowed in this document: “moz-extension://a904e032-5fa9-4784-80a2-d48c905260a9/content/471.04f0d4e7b5608725.js”. powiadomienia:1:1
Security Error: Content at https://obywatel.ufg.pl/powiadomienia may not load or link to moz-extension://a904e032-5fa9-4784-80a2-d48c905260a9/content/677.846c2862082fe70b.js.
<script> source URI is not allowed in this document: “moz-extension://a904e032-5fa9-4784-80a2-d48c905260a9/content/677.846c2862082fe70b.js”. powiadomienia:1:1
Security Error: Content at https://obywatel.ufg.pl/powiadomienia may not load or link to moz-extension://a904e032-5fa9-4784-80a2-d48c905260a9/content/217.144cba33744f795e.js.
<script> source URI is not allowed in this document: “moz-extension://a904e032-5fa9-4784-80a2-d48c905260a9/content/217.144cba33744f795e.js”. powiadomienia:1:1
ChunkLoadError: Loading chunk 217 failed.
(error: moz-extension://a904e032-5fa9-4784-80a2-d48c905260a9/content/217.144cba33744f795e.js)
j https://obywatel.ufg.pl/mr/rweb/main.854052fcbcbd835c.js:1
e https://obywatel.ufg.pl/mr/rweb/main.854052fcbcbd835c.js:1
e https://obywatel.ufg.pl/mr/rweb/main.854052fcbcbd835c.js:1
4431 https://obywatel.ufg.pl/mr/rweb/main.854052fcbcbd835c.js:1
n https://obywatel.ufg.pl/mr/rweb/main.854052fcbcbd835c.js:1
<anonymous> https://obywatel.ufg.pl/mr/rweb/main.854052fcbcbd835c.js:1
<anonymous> https://obywatel.ufg.pl/mr/rweb/main.854052fcbcbd835c.js:1
main.854052fcbcbd835c.js:1:93
4431 https://obywatel.ufg.pl/mr/rweb/main.854052fcbcbd835c.js:1
invoke https://obywatel.ufg.pl/mr/rweb/polyfills.31777991649170a2.js:1
run https://obywatel.ufg.pl/mr/rweb/polyfills.31777991649170a2.js:1
et https://obywatel.ufg.pl/mr/rweb/polyfills.31777991649170a2.js:1
invokeTask https://obywatel.ufg.pl/mr/rweb/polyfills.31777991649170a2.js:1
runTask https://obywatel.ufg.pl/mr/rweb/polyfills.31777991649170a2.js:1
ee https://obywatel.ufg.pl/mr/rweb/polyfills.31777991649170a2.js:1
invokeTask https://obywatel.ufg.pl/mr/rweb/polyfills.31777991649170a2.js:1
Te https://obywatel.ufg.pl/mr/rweb/polyfills.31777991649170a2.js:1
ye https://obywatel.ufg.pl/mr/rweb/polyfills.31777991649170a2.js:1
Oe https://obywatel.ufg.pl/mr/rweb/polyfills.31777991649170a2.js:1
After disabling KeepassXC browser plugin and refreshing page it loads without problems. I can use this website only with plugin disabled. After enabling plugin next click or refresh causes site to be empty and the errors similar to what I already pasted.
I tried adding this site to "Site preferences" and setting "Disable all features", or "Enable all features", and all other combinations - it did not help.
One way to login to this website is to use gov. issued mObywatel app from app store (ios and android). There are other option but I can't use them. None of these option is passkey.
Would it be possible to create kind of "blacklist" where this addon can't modify webpage source?
I used "login" wrongfully - login itself works fine but webpage is empty/white after logging in. So my first impression was that login failed because there was no visible result of logging in.
I should probably try disabling all other extension as well. The log you pasted doesn't include anything from our extension. Does this happen with other browsers as well?
I tried in Brave - same situation. Also I noticed another thing - I need to just disable passkeys in browser extension to fix the issue. Firefox and Brave - same behaviour.
Then this is probably related to the injected script we are adding because of passkeys support. Something inside it must collide with the page.
Related: https://github.com/keepassxreboot/keepassxc-browser/issues/2475
The issues handled at https://github.com/keepassxreboot/keepassxc-browser/issues/2494