fusionauth-issues
fusionauth-issues copied to clipboard
View dialogs may be blocked by ad blockers or Brave browser
View dialogs may be blocked by ad blockers or Brave browser
Description
Some AJAX dialogs in FusionAuth may be blocked by ad blocker plugins, or the brave browser.
Brave reports:
Cross-site trackers blocked
https://example.fusionauth.io/ajax/system/event-log/view/7
Blocked
- Chrome + Ad Blockl
- Brave with shields up
Works
- Firefox
- Chrome
- Brave with shields down
Cause
The AJAX URL /ajax/system/event-log/view/7
is causing this to be blocked due to the word event-log
.
Solutions
- Tell users to disable ad block on FusionAuth
- Change our path to something like:
/ajax/system/el/view/7
- Enumerate all AJAX paths and drop a cookie or something like that and then have prime.js replace the path with the enumerated path in the cookie before making the ajax request. Then have prime map it back in the action mapper.
- Similar to the previous idea, but base64 (URL encoding w/out padding) encode the path segments and then have prime-mvc decode them based some configuration such as the presence of a config in
package-info.java
. - Others?
This seems to work on a current version of Brave. Perhaps no longer an issue.
Version 1.43.93 Chromium: 105.0.5195.127 (Official Build) (arm64) (https://brave.com/latest/)