react-client-sdk icon indicating copy to clipboard operation
react-client-sdk copied to clipboard

Published 20 hours ago • verified publisher icon launchdarkly

Firefox blocks `/eval/` requests

Open drewcorlin1 opened this issue 1 year ago • 7 comments

Describe the bug Non-anonymous eval requests (https://clientstream.launchdarkly.com/eval/<id>/<data>) are being blocked only in firefox (working fine in Chrome, Safari, Edge) with the error message below.

To reproduce Make an identify() call with the LaunchDarkly client

Expected behavior No error is logged in the console

Logs

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://clientstream.launchdarkly.com/eval/<id>/<data>. (Reason: CORS request did not succeed). Status code: (null).

SDK version 3.0.6

Language version, developer tools Javascript/React with the sync LD provider

OS/platform Mac OS Ventura 13.3.1 - Firefox 115.0.3 64 bit

Additional context The anonymous identify call (seemingly triggered automatically by LD) is not blocked. Also the non-anonymous call that does throw an error seems to actually register the context in LaunchDarkly, so it might just be noise.

drewcorlin1 avatar Aug 02 '23 19:08 drewcorlin1

@drewcorlin1 are you able to share more information about this please?

  • Is this happening in dev only or in production or both?
  • Please share some of the application code which shows your usage of the react sdk.
  • Do live updates/streaming still work even with the error?
  • Are you running any third party plugins in firefox that may cause the issue? Can you please try reproducing in incognito?
  • Do you have enhanced protection settings turned on in firefox which may cause the issue?

yusinto avatar Aug 07 '23 20:08 yusinto

@yusinto

  • This is happening in both production and dev
  • The app still works despite these CORs issue errors being thrown
  • This was run in clean version of Firefox and within incognito
  • Enhanced protection is not on

ToothpickFactory avatar Aug 08 '23 19:08 ToothpickFactory

Thank you, we will investigate. Internally logged as 213182.

yusinto avatar Aug 16 '23 23:08 yusinto

@yusinto is there any update on this?

drewcorlin1 avatar Sep 11 '23 19:09 drewcorlin1

This issue is marked as stale because it has been open for 30 days without activity. Remove the stale label or comment, or this will be closed in 7 days.

github-actions[bot] avatar Oct 12 '23 01:10 github-actions[bot]

Still hoping for a response here

drewcorlin1 avatar Oct 12 '23 12:10 drewcorlin1

Is there any updates on this.

gdp2 avatar Apr 03 '24 15:04 gdp2