v2 icon indicating copy to clipboard operation
v2 copied to clipboard

Unable to fetch feed from https://desgeeksetdeslettres.com/feed/ (HTTPS returns binary ??)

Open SansGuidon opened this issue 5 months ago • 2 comments

The problem arises with both Miniflux and RSS-Bridge.

image

But the RSS seems valid according to

  • https://validator.w3.org/feed/check.cgi?url=https%3A%2F%2Fdesgeeksetdeslettres.com%2Ffeed%2F
  • https://www.rssboard.org/rss-validator/check.cgi?url=https%3A%2F%2Fdesgeeksetdeslettres.com%2Ffeed%2F

I notice that if I subscribe to the feed without HTTPS, it works, which is weird.

httpie output for https feed :

$ http https://desgeeksetdeslettres.com/feed/
HTTP/1.1 200 OK
CF-Cache-Status: DYNAMIC
CF-RAY: 846d7a3c5ff80b75-AMS
Cache-Control: max-age=0, must-revalidate, private
Connection: keep-alive
Content-Encoding: br
Content-Security-Policy: upgrade-insecure-requests;
Content-Type: application/rss+xml; charset=UTF-8
Date: Wed, 17 Jan 2024 11:31:05 GMT
ETag: W/"108800faa35939d5bacdf92a8aba12d8"
Last-Modified: Tue, 16 Jan 2024 13:57:33 GMT
Link: <https://desgeeksetdeslettres.com/wp-json/>; rel="https://api.w.org/"
Server: Sucuri/Cloudproxy
Set-Cookie: __cf_bm=nbQ2fePB9DMtvp_5TJtB.dtcc9GOtkI_7bewdo.YZKM-1705482756-1-ARqIDKilWRJaoZKuapZTTIvbubQYE5OhqA3t9TrmOUSTr59QmSWuJsK5FHgRaDJqhdwAW4tmgticA1Rswak+IgM=; path=/; expires=Wed, 17-Jan-24 09:42:36 GMT; domain=.desgeeksetdeslettres.com; HttpOnly; Secure; SameSite=None
Transfer-Encoding: chunked
Vary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding
X-Cache: MISS
X-Cache-Group: normal
X-Cacheable: NO:Passed
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Pass-Why: nevercache-ua
X-Sucuri-Cache: HIT
X-Sucuri-ID: 19014
X-UA-Compatible: IE=edge
X-XSS-Protection: 1; mode=block
alt-svc: h3=":443"; ma=86400

+-----------------------------------------+
| NOTE: binary data not shown in terminal |
+-----------------------------------------+

While it outputs the feed in case I'm using http.

As I have a workaround (using http instead of https) I'm not blocked, but I somehow believe explaining the difference between results obtained with RSS-Bridge/Miniflux vs RSS validators could lead to shared knowledge and hopefully improve the situation ?

Thanks in advance for the awesome work, I love Miniflux !

SansGuidon avatar Jan 17 '24 11:01 SansGuidon

This website is most likely misconfigured. It should not reply a compressed body (see Content-Encoding value) if the client did not send explicitly a Accept-Encoding header.

  • Does not work: curl -v http://desgeeksetdeslettres.com/feed/
  • Works: curl -v --compressed https://desgeeksetdeslettres.com/feed/

A workaround could probably be implemented but that require a code change.

fguillot avatar Jan 18 '24 05:01 fguillot

Thank you ! I've also made them aware of the issue, hoping they got the message.

SansGuidon avatar Jan 18 '24 09:01 SansGuidon