rodalies.gencat.cat/es/ Topic is solved

[mkahn321]

Broken site in Pale Moon versions 29.4.5 and 29.4.5.1, since late March

http://rodalies.gencat.cat/es/horaris/
http://rodalies.gencat.cat/es/inici

A few seconds after loading or browsing from one address to the other, Pale Moon freezes.

This rarely happens when clicking "Cancel" in the HTTP credentials box.

[josephd]

Site loads for me. No freezing. All pages clicked on opened with no problem. Not being fluent in spanish, have no idea what the site is about.

Off-topic:
Windows 10, Pale Moon 29.4.5.1 (64 bit)

[Night Wing]

Maybe I'm missing something since I don't speak spanish, but both links work for me without any freezing.

At this time I'm using 64 bit linux Pale Moon 29.4.5.1 running in 64 bit linux Mint 20.3 (Una) Xfce.

[mkahn321]

This also occurs for http://rodalies.gencat.cat/en/horaris/
The issue is that when some AV/Firewalls are active, an "Authentication Required" box appears for HTTP sites every time. If you click on "Ok" until it disappears, the page crashes more often (70%) than not. Entering an user/password makes no difference.

I know that this may be the Antivirus fault or an CSP issue, but in any case it should not crash when clicking "Ok", and it would be better if there was a config preference to silence repeated login requests.

Maybe I'm missing something since I don't speak spanish, but both links work for me without any freezing.

At this time I'm using 64 bit linux Pale Moon 29.4.5.1 running in 64 bit linux Mint 20.3 (Una) Xfce.

[Night Wing]

Since neither site freezes for me, I'm going to take a guess and say it might be due to an antivirus program (McAfee) which you have installed in Windows.

I say this because in linux Mint, I use the default firewall which comes with Mint. But, I have "never" installed an antivirus program in Mint and I have been using linux Mint since January of 2013 when I started using Mint 14.

[Moonchild]

"McAfee Cloud Web protection", eh?
Well I'm guessing they use some kind of intercepting proxy for your web traffic in that case which is a very bad idea. I've explained why in this F.A.Q. post.

In addition, the so-called "basic auth" authentication for websites is exactly that: very basic. It is used as a bare-bones authentication method to prevent trivial access to resources that shouldn't be public, but provides no security otherwise. I'm not sure why it would even be in use there, unless this is a bug or the web server throws back an authentication required error and McAfee doesn't know how to deal with it (very possible)

[Moonraker]

So the next logical step would be to disable the security program and see what happens.

Both websites appear to work normally here with no freezes incidentally.

[Moonchild]

So the next logical step would be to disable the security program and see what happens.

In the case of McAfee I really just recommend you remove it forthwith. The only reason it's still on end user's PCs in 2022 is because it came installed as SI/AIB bloatware on a prebuilt. I can't honestly believe people would actually go out of their way to install it themselves.
If you feel you need automated threat protection, I'd suggest you use Malwarebytes' or Bitdefender's software instead.

[mkahn321]

That antivirus is mandatory, so no can do, but I found a workaround by checking out Firefox profiles.
Set network.http.pipelining to false and the messages disappear.

It may be unsafe and non-private (https://forum.palemoon.org/viewtopic.php?f=24&t=14122), but it works.

[Moonchild]

That antivirus is mandatory

Work PC and company enforced? in that case I'd suggest talking to your IT department. McAfee is a really really poor end point protection solution.

Set network.http.pipelining to false and the messages disappear.

Ah so not only is it proxying which isn't safe, but it doesn't even implement the HTTP protocol spec properly. Wow.