https://web.tecalliance.net/tecdocsw/de/login CORS problem

For support with specific websites

Moderator: trava90

Forum rules
Please always mention the name/domain of the website in question in your topic title.
Please one website per topic thread (to help keep things organized). While behavior on different sites might at first glance seem similar, they are not necessarily caused by the same.

Please try to include any relevant output from the Toolkit Error Console or the Developer Tools Web Console using the following procedure:
  1. Clear any current output
  2. Navigate or refresh the page in question
  3. Copy and paste Errors or seemingly relevant Warnings into a single [ code ] block.
User avatar
Mictlantecutli
New to the forum
New to the forum
Posts: 2
Joined: 2022-11-28, 12:28

https://web.tecalliance.net/tecdocsw/de/login CORS problem

Unread post by Mictlantecutli » 2022-11-28, 12:34

The website is not working (login page can not load because of CORS problem in newest version 31.4.0

Code: Select all

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://tecdoc.piwik.pro/ppms.php?action_name=TecDoc%20Catalogue&idsite=f364dd26-d08f-4d3b-b879-8f057d7f7300&rec=1&r=237553&h=13&m=28&s=34&url=https%3A%2F%2Fweb.tecalliance.net%2Ftecdocsw%2Fde%2Flogin&_id=829cade696e0bfdd&_idts=1666874567&_idvc=7&_idn=0&_viewts=1669638514&send_image=0&ts_n=jstc_tm&ts_v=2.8.3&cookie=1&res=5120x1440&gt_ms=224&t_ss=0&t_fs=2&t_ds=2&t_cs=2&t_ce=92&t_qs=94&t_as=318&t_ae=318&t_dl=324&t_di=366&t_ls=760&t_le=760&t_dc=760&t_ee=760&pv_id=MczXI7. (Reason: expected ‘true’ in CORS header ‘Access-Control-Allow-Credentials’).  
(unknown)
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://tecdoc.piwik.pro/ppms.php?ping=3&idsite=f364dd26-d08f-4d3b-b879-8f057d7f7300&rec=1&r=356873&h=13&m=28&s=38&url=https%3A%2F%2Fweb.tecalliance.net%2Ftecdocsw%2Fde%2Flogin&_id=829cade696e0bfdd&_idts=1666874567&_idvc=7&_idn=0&_viewts=1669638514&send_image=0&ts_n=jstc_tm&ts_v=2.8.3&cookie=1&res=5120x1440&gt_ms=224&pv_id=MczXI7. (Reason: expected ‘true’ in CORS header ‘Access-Control-Allow-Credentials’).  
(unknown)
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://tecdoc.piwik.pro/ppms.php?ping=1&idsite=f364dd26-d08f-4d3b-b879-8f057d7f7300&rec=1&r=889111&h=13&m=33&s=16&url=https%3A%2F%2Fweb.tecalliance.net%2Ftecdocsw%2Fde%2Flogin&_id=829cade696e0bfdd&_idts=1666874567&_idvc=7&_idn=0&_viewts=1669638514&send_image=0&ts_n=jstc_tm&ts_v=2.8.3&cookie=1&res=5120x1440&gt_ms=224&pv_id=MczXI7. (Reason: expected ‘true’ in CORS header ‘Access-Control-Allow-Credentials’).  
(unknown)
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://tecdoc.piwik.pro/ppms.php?ping=3&idsite=f364dd26-d08f-4d3b-b879-8f057d7f7300&rec=1&r=937831&h=13&m=33&s=18&url=https%3A%2F%2Fweb.tecalliance.net%2Ftecdocsw%2Fde%2Flogin&_id=829cade696e0bfdd&_idts=1666874567&_idvc=7&_idn=0&_viewts=1669638514&send_image=0&ts_n=jstc_tm&ts_v=2.8.3&cookie=1&res=5120x1440&gt_ms=224&pv_id=MczXI7. (Reason: expected ‘true’ in CORS header ‘Access-Control-Allow-Credentials’).  
(unknown)

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35603
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: https://web.tecalliance.net/tecdocsw/de/login CORS problem

Unread post by Moonchild » 2022-11-28, 12:48

In 31.4.0, CORS has become stricter to adhere more closely to the CORS standard.

If they are using CORS mode and want to pass credentials, the server has to send an access-control-allow-credentials header. I checked the networking requests and they only send an access-control-allow-origin header (which enables CORS mode) but does not send an allow-credentials header, which makes it default to false. I'm pretty sure this is necessary for beacon usage (as well as allowing third-party cookies)
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

User avatar
Mictlantecutli
New to the forum
New to the forum
Posts: 2
Joined: 2022-11-28, 12:28

Re: https://web.tecalliance.net/tecdocsw/de/login CORS problem

Unread post by Mictlantecutli » 2022-11-28, 12:51

Is there any easy solution to access this page until they will solve it?

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35603
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: https://web.tecalliance.net/tecdocsw/de/login CORS problem

Unread post by Moonchild » 2022-11-28, 13:17

I'm afraid not. There's no mechanism to easily bypass CORS/SOP deliberately.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

Locked