website not working with PM Atom/XP

[greyowl]

The login website for Avast Forum is not working with PM Atom/XP. It will not display the login box for username and password. It works fine with FF.
Here are the URLs:
https://forum.avast.com/
https://forum.avast.com/index.php?actio ... oard%3D2.0
https://id.avast.com/?target=https%3A%2 ... .com#login

[New Tobin Paradigm]

Seems like CSP...

Code: Select all

Timestamp: 9/17/2015 7:57:16 PM
Warning: Content Security Policy: The page's settings blocked the loading of a resource at https://bat.bing.com/bat.js ("default-src https://*.ff.avast.com:* https://*.avast.com:* https://*.googleapis.com:* https://*.gstatic.com:* https://*.googletagmanager.com:* https://*.googleadservices.com:* https://*.doubleclick.net:* https://*.google-analytics.com:* https://*.facebook.net:* https://*.facebook.com:* https://*.google.com:* 'unsafe-eval' 'unsafe-inline'").

Also their webfonts seem messed up.. may be resulting from CSP as well.. dunno but figured i'd mention it..

Code: Select all

Timestamp: 9/17/2015 7:57:16 PM
Error: downloadable font: invalid version tag (font-family: "avasticon-font" style:normal weight:normal stretch:normal src index:1)
source: https://static.avast.com/my/avasticon/1.0.327/icons/fonts/avasticon-font.woff?9c5ad4e4899b727dc40a284424d5443b
Source File: https://static.avast.com/my/avasticon/1.0.327/icons/css/avasticon-font.css
Line: 0
Source Code:
@font-face {   font-family: "avasticon-font";   font-style: normal;   font-weight: normal;   src: url("../fonts/avasticon-font.eot?#iefix") format("embedded-opentype"), url("../fonts/avasticon-font.woff?9c5ad4e4899b727dc40a284424d5443b") format("woff"), url("../fonts/avasticon-font.ttf?9c5ad4e4899b727dc40a284424d5443b") format("truetype"); }

Timestamp: 9/17/2015 7:57:16 PM
Error: downloadable font: rejected by sanitizer (font-family: "avasticon-font" style:normal weight:normal stretch:normal src index:1)
source: https://static.avast.com/my/avasticon/1.0.327/icons/fonts/avasticon-font.woff?9c5ad4e4899b727dc40a284424d5443b
Source File: https://static.avast.com/my/avasticon/1.0.327/icons/css/avasticon-font.css
Line: 0
Source Code:
@font-face {   font-family: "avasticon-font";   font-style: normal;   font-weight: normal;   src: url("../fonts/avasticon-font.eot?#iefix") format("embedded-opentype"), url("../fonts/avasticon-font.woff?9c5ad4e4899b727dc40a284424d5443b") format("woff"), url("../fonts/avasticon-font.ttf?9c5ad4e4899b727dc40a284424d5443b") format("truetype"); }

[ron_1]

Off-topic:
If they can't code a website properly, how well do they code their AV? And I use Avast, too!

[greyowl]

What is CSP?
Why does Firefox open the site OK?
How should I proceed to deal with this problem?
Is there something that PM needs to do?
Is there something that Avast needs to do?

[dark_moon]

CSP: https://developer.mozilla.org/en-US/doc ... curity/CSP

Firefox open sites at all costs and ignore the user security & privacy so it open a lot of more sites, even it the sites are unsecure.

You should post avast a message so they can fix it.

It looks avast scan the browser and yes, it looks avast doesn't like Pale Moon:

avast.png