fusionauth-issues icon indicating copy to clipboard operation
fusionauth-issues copied to clipboard

View dialogs may be blocked by ad blockers or Brave browser

Open robotdan opened this issue 4 years ago • 1 comments

View dialogs may be blocked by ad blockers or Brave browser

Description

Some AJAX dialogs in FusionAuth may be blocked by ad blocker plugins, or the brave browser.

Brave reports:

Cross-site trackers blocked

https://example.fusionauth.io/ajax/system/event-log/view/7

Blocked

  • Chrome + Ad Blockl
  • Brave with shields up

Works

  • Firefox
  • Chrome
  • Brave with shields down

Cause

The AJAX URL /ajax/system/event-log/view/7 is causing this to be blocked due to the word event-log.

Solutions

  1. Tell users to disable ad block on FusionAuth
  2. Change our path to something like: /ajax/system/el/view/7
  3. Enumerate all AJAX paths and drop a cookie or something like that and then have prime.js replace the path with the enumerated path in the cookie before making the ajax request. Then have prime map it back in the action mapper.
  4. Similar to the previous idea, but base64 (URL encoding w/out padding) encode the path segments and then have prime-mvc decode them based some configuration such as the presence of a config in package-info.java.
  5. Others?

robotdan avatar Nov 01 '20 19:11 robotdan

This seems to work on a current version of Brave. Perhaps no longer an issue.

Version 1.43.93 Chromium: 105.0.5195.127 (Official Build) (arm64) (https://brave.com/latest/)

robotdan avatar Sep 30 '22 19:09 robotdan