Port_Authority
Port_Authority copied to clipboard
[False Positive] identity.trimble.com -> localhost (SketchUp)
The URL identity.trimble.com
To Reproduce Steps to reproduce the behavior:
- You will need SketchUp 2020 Desktop version to reproduce this false positive (free trail: https://www.sketchup.com/try-sketchup#for-personal)
- When trying to login to the application it opens a browser window.
- Login in to a Trimble account.
- The website redirects to a local IP, set up by the SketchUp application to authenticate the app. The browser will show the Port Authority warning and log in process is broken.
Desktop (please complete the following information):
- OS: Windows 10
- Browser Firefox 91
Additional context In relation to #10 it would be nice to have the option to allow redirecting from certain domains to a local IP and have a per-configured whitelist.
Interestingly UBo (with LAN filter enabled) does not block this redirection login method.
Hey @ph00lt0 hopefully I will have a big update out soon with the option to whitelist sites like this. It definitely is needed in some situations. I’ll keep you posted. I am interested as to why uBo doesn’t block it, hmmm.
@ACK-J, not 100% sure but I think the difference between uBo and PortAuthority is that the latter one blocks redirects to the localhost where as uBo only blocks the third party connections.
I just released V1.1.3
which adds a whitelist option in the extension settings. Please update your extension by going to Mozilla Firefox -> Manage Extensions -> Click the gear in the top right corner -> Click "Check for updates"