What setting could cause this to break Mewe?

For support with specific websites

Moderator: trava90

Forum rules
Please always mention the name/domain of the website in question in your topic title.
Please one website per topic thread (to help keep things organized). While behavior on different sites might at first glance seem similar, they are not necessarily caused by the same.

Please try to include any relevant output from the Toolkit Error Console or the Developer Tools Web Console using the following procedure:
  1. Clear any current output
  2. Navigate or refresh the page in question
  3. Copy and paste Errors or seemingly relevant Warnings into a single [ code ] block.
User avatar
moonbat
Knows the dark side
Knows the dark side
Posts: 5551
Joined: 2015-12-09, 15:45

What setting could cause this to break Mewe?

Unread post by moonbat » 2020-06-27, 10:41

So when I try to sign in on Mewe.com, nothing happens after entering username and password. On a fresh profile it works fine.
I've whitelisted mewe.com and hcaptcha.net and their related subdomains in nMatrix (props to them, they don't really have any ad servers or trackers to begin with), allowed cookies to be loaded, but the browser console shows this -

Code: Select all

20:33:05.594 Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://hcaptcha.com/checksiteconfig?host=mewe.com&sitekey=884185af-836c-447c-815e-b83f326f569c&sc=1&swa=0. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://hcaptcha.com’). 1 (unknown)
What's this mean, and what could be interfering with this? The only similar sounding setting I could think of is 'Cross origin referer policy' in Pale Moon Commander which I've not changed from the default.
"One hosts to look them up, one DNS to find them and in the darkness BIND them."

Image
KDE Neon on a Slimbook Excalibur (Ryzen 7 8845HS, 64 GB RAM)
AutoPageColor|PermissionsPlus|PMPlayer|Pure URL|RecordRewind|TextFX

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 37534
Joined: 2011-08-28, 17:27
Location: Motala, SE

Re: What setting could cause this to break Mewe?

Unread post by Moonchild » 2020-06-27, 11:56

CORS has to be set up by mewe properly. They may have forgotten to do so for switching to hCaptcha.
it's not something you can control on the client side as it's an integral part of networking security and header processing to enforce same-origin use of scripting.
"A dead end street is a place to turn around and go into a new direction" - Anonymous
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

User avatar
moonbat
Knows the dark side
Knows the dark side
Posts: 5551
Joined: 2015-12-09, 15:45

Re: What setting could cause this to break Mewe?

Unread post by moonbat » 2020-06-27, 12:01

But it works fine on a fresh profile with no extensions, that's why I wondered what could be causing it.
"One hosts to look them up, one DNS to find them and in the darkness BIND them."

Image
KDE Neon on a Slimbook Excalibur (Ryzen 7 8845HS, 64 GB RAM)
AutoPageColor|PermissionsPlus|PMPlayer|Pure URL|RecordRewind|TextFX