Aftership.com wont load anymore

Users and developers helping users with generic and technical Pale Moon issues on all operating systems.

Moderator: trava90

Forum rules
This board is for technical/general usage questions and troubleshooting for the Pale Moon browser only.
Technical issues and questions not related to the Pale Moon browser should be posted in other boards!
Please keep off-topic and general discussion out of this board, thank you!
User avatar
cartel
Lunatic
Lunatic
Posts: 475
Joined: 2014-03-16, 21:57
Location: Chilliwack, BC

Aftership.com wont load anymore

Unread post by cartel » 2022-11-10, 19:16

Operating system:7
Browser version:latest 64
32-bit or 64-bit browser?:^
Problem URL:aftership.com/track
Browser theme (if not default):none
Installed add-ons:none
Installed plugins: (about:plugins):none

If possible, please include the output of help->troubleshooting information (as text):
Timestamp: 11/10/2022 10:54:51 AM
Warning: Content Security Policy: Ignoring ‘x-frame-options’ because of ‘frame-ancestors’ directive.
Timestamp: 11/10/2022 10:55:19 AM
Error: None of the “sha512” hashes in the integrity attribute match the content of the subresource.
Source File: https://www.aftership.com/track
Line: 0
tried a new profile and it wont load. It used to work fine.
works on chrome
2021202.jpg
ImageImage

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35474
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: Aftership.com wont load anymore

Unread post by Moonchild » 2022-11-10, 21:39

Code: Select all

None of the “sha512” hashes in the integrity attribute match the content of the subresource.
They need to fix their hashes, then :P
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

User avatar
cartel
Lunatic
Lunatic
Posts: 475
Joined: 2014-03-16, 21:57
Location: Chilliwack, BC

Re: Aftership.com wont load anymore

Unread post by cartel » 2022-11-10, 22:25

ya not sure whats going on.
works on chrome and it works on archive.is

https://archive.ph/H3Cbv/image

the page says its PKCS #1 SHA-256 With RSA Encryption
ImageImage

vannilla
Moon Magic practitioner
Moon Magic practitioner
Posts: 2183
Joined: 2018-05-05, 13:29

Re: Aftership.com wont load anymore

Unread post by vannilla » 2022-11-10, 23:43

cartel wrote:
2022-11-10, 22:25
works on chrome
This is actually a bad thing.
I don't know specifically about this site, but in general Chrome, and by extension Firefox, has adopted a policy of connecting to websites no matter what, often without warning the user.
This means that users can connect to misconfigured or outright insecure websites without realizing it, in addition of hiding important details to webmasters.
The latter, in particular, is a big issue if the site contains sensitive data as the administrators will not be able to properly assess the safety of said sensitive content.

User avatar
Kris_88
Keeps coming back
Keeps coming back
Posts: 933
Joined: 2021-01-26, 11:18

Re: Aftership.com wont load anymore

Unread post by Kris_88 » 2022-11-12, 03:03

Error: TypeError: document.querySelector(...).attachShadow is not a function
Source File: https://track-widgets.aftership.com/static/index.js
Line: 1

Solution:

1) disable internal webcomponents.
set "dom.webcomponents.enabled" to "false"
2) use Greasemonkey script:

Code: Select all

// ==UserScript==
// @name        aftership
// @namespace   aftership1
// @include     https://www.aftership.com/*
// @run-at document-start
// @version     1
// @grant       none
// ==/UserScript==

  document.addEventListener("beforescriptexecute", function(e) {
      document.removeEventListener("beforescriptexecute", arguments.callee, true);
      var s = document.createElement('script');
      s.type = 'text/javascript';
      s.src = 'https://cdn.jsdelivr.net/npm/@webcomponents/webcomponentsjs@2.7.0/webcomponents-bundle.js';
      s.async = false;
      e.target.parentNode.insertBefore(s, e.target);
      e.target.parentNode.removeChild(s);

  }, true);

User avatar
cartel
Lunatic
Lunatic
Posts: 475
Joined: 2014-03-16, 21:57
Location: Chilliwack, BC

Re: Aftership.com wont load anymore

Unread post by cartel » 2022-11-17, 19:09

webcomponents is disabled by default.
ImageImage

jez9999
Fanatic
Fanatic
Posts: 106
Joined: 2015-05-30, 19:35
Location: UK

Re: Aftership.com wont load anymore

Unread post by jez9999 » 2022-11-18, 10:28

vannilla wrote:
2022-11-10, 23:43
cartel wrote:
2022-11-10, 22:25
works on chrome
This is actually a bad thing.
I don't know specifically about this site, but in general Chrome, and by extension Firefox, has adopted a policy of connecting to websites no matter what, often without warning the user.
This means that users can connect to misconfigured or outright insecure websites without realizing it, in addition of hiding important details to webmasters.
The latter, in particular, is a big issue if the site contains sensitive data as the administrators will not be able to properly assess the safety of said sensitive content.
Kind of ironic considering they're going in the opposite direction with their increasingly "use HTTPS or die" zealot-like attitude, and the outright refusal to allow a user to view a page that fails SSL in an HSTS context (yeah, I know the spec says that, but and spec that dictates what they user should be able to view on their own machine no matter what settings they set is a dumb spec).

vannilla
Moon Magic practitioner
Moon Magic practitioner
Posts: 2183
Joined: 2018-05-05, 13:29

Re: Aftership.com wont load anymore

Unread post by vannilla » 2022-11-18, 11:43

jez9999 wrote:
2022-11-18, 10:28
Kind of ironic considering they're going in the opposite direction with their increasingly "use HTTPS or die" zealot-like attitude, and the outright refusal to allow a user to view a page that fails SSL in an HSTS context (yeah, I know the spec says that, but and spec that dictates what they user should be able to view on their own machine no matter what settings they set is a dumb spec).
Off-topic:
Never claimed they did things coherently. I'm just saying that they allow connections even through misconfigured channels that can potentially be insecure.
Whether they force HTTPS or not is irrelevant to this.
If we want to wear our tinfoil full-set armor, we could argue that this is all a plan to dilute web security through Let's Encrypt and poorly-configured channels, so as to implant a world-wide backdoor to get access to people's machines/data/other.

User avatar
Kris_88
Keeps coming back
Keeps coming back
Posts: 933
Joined: 2021-01-26, 11:18

Re: Aftership.com wont load anymore

Unread post by Kris_88 » 2022-11-18, 17:07

cartel wrote:
2022-11-17, 19:09
webcomponents is disabled by default.
In fact, “thank you” would be more appropriate. :D

User avatar
cartel
Lunatic
Lunatic
Posts: 475
Joined: 2014-03-16, 21:57
Location: Chilliwack, BC

Re: Aftership.com wont load anymore

Unread post by cartel » 2022-11-24, 00:40

Kris_88 wrote:
2022-11-18, 17:07
cartel wrote:
2022-11-17, 19:09
webcomponents is disabled by default.
In fact, “thank you” would be more appropriate. :D
thanks I'll just use chrome.
I dont need more addons
ImageImage

Locked