Pale Moon forum

jouven wrote: ↑

2022-05-13, 00:05

Seems Cloudflare has fixed the issue (for now), no more loops, sites load correctly, I'm on PM 31

Works for me as well with all three of the user agent modes. Even works with my referrer blocker enabled, which caused it to loop before the bug was introduced.

I'm on PM 31 on Linux.

-----edit-----

Also, thanks for the noise everyone helped to make about this. There's no way this would have been fixed without your help.

jouven wrote: ↑

2022-05-13, 00:05

Seems Cloudflare has fixed the issue (for now), no more loops, sites load correctly, I'm on PM 31

A 'CF protected' site that pretty much just lists documentary videos, in a very good way for me, was inaccessible to me until today when I went there. Another site that I tried to get to a while ago, codepen.io, proved to be inaccessible to me because of this fiasco. Perhaps it's just a 'propagation' thing for me..

I also confirm I can now visit a previously broken website.

Fanfiction.net is back to their favorite Captchas, which are annoying, but far preferable to being locked out.

Thank you to everyone who made noise about this issue.

It's certainly my hope that CloudFlare won't pull something like this again, but I wouldn't be surprised if they do.

This was probably just the test run, to see how the Internet responded.

So, CloudFlare, after going silent on me in their support ticket last Friday, today sent me the following answer+ticket closure mail. Not addressing any of the points I made, nor giving me a personal response. Sad state of things, tbh.

Hello,

Thank you for contacting Cloudflare Support.

The issue has been fixed since yesterday.

For more information, please take a look at:

https://news.ycombinator.com/item?id=31317886

Best Regards,

Christopher M

At least it's now gone, and I does still affect some minor web browsers like Otter Browser: https://github.com/OtterBrowser/otter-b ... ssues/1732

Such a shame.

This started yesterday evening on gab.com after they made changes due to a DDOS earlier that morning. I got in with both SeaMonkey and Waterfox Classic (have to allow images from base domain while signing in) but haven't found a fix for Pale Moon. I can try user agent if that is likely to work but from reading this thread I can't tell if it will. I tried with both my regular portable installation and a separate install with default profile. I don't have enough clout to get the site owner's attention regarding not using Cloudfare. ... I tried site specific useragent using same the one from SeaMonkey, didn't make a difference.

Michaell wrote: ↑

2022-07-15, 20:30

This started yesterday evening on gab.com after they made changes due to a DDOS earlier that morning. I got in with both SeaMonkey and Waterfox Classic (have to allow images from base domain while signing in) but haven't found a fix for Pale Moon. I can try user agent if that is likely to work but from reading this thread I can't tell if it will. I tried with both my regular portable installation and a separate install with default profile. I don't have enough clout to get the site owner's attention regarding not using Cloudfare. ... I tried site specific useragent using same the one from SeaMonkey, didn't make a difference.

Gab is allowing me to the login screen after a brief cloudflare check right now. Is it fixed for you? My user agent is the default palemoon one: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Goanna/5.1 Firefox/102.0 PaleMoon/31.1.1

I don't have a Gab account, can't check it past that screen.

andyprough wrote: ↑

2022-07-15, 22:47

My user agent is the default palemoon one: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Goanna/5.1 Firefox/102.0 PaleMoon/31.1.1

Didn't you manually change that to Firefox/102.0 for testing? I thought the default Firefox version in the default 31.1.1 useragent was still 68.0 ... ?

No nothing has changed using my regular profile. I don't want to try the clean install again unless I hear they changed something (that almost froze my system before). I get the little banner at the top that says, "Pale Moon prevented this page from automatically reloading". It has an Allow button that does no good. What would help some is knowing what setting that warning is linked to. But since the clean profile fresh portable install didn't work either, I'm about through with random wild goose chasing.

I've tried whatever the one posted earlier in this thread was, 100.0 I think. Tried 78 that works with SM. This is all going nowhere.

Nigaikaze wrote: ↑

2022-07-15, 23:30

andyprough wrote: ↑

2022-07-15, 22:47

My user agent is the default palemoon one: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Goanna/5.1 Firefox/102.0 PaleMoon/31.1.1

Didn't you manually change that to Firefox/102.0 for testing? I thought the default Firefox version in the default 31.1.1 useragent was still 68.0 ... ?

Oh you're right - woops! I forgot. Yes, it could be that the Firefox 102 compatibility I'm using is the reason it's working for me.

@Michaell - Go to about:config, and change general.useragent.compatMode.version from 68.0 to 102.0, see if that helps.

FWIW, bug #446344 seems to be related as to why Cloudflare sites are redirecting infinitely, according to folks from SeaMonkey. It doesn't seem to be too difficult to backport. We could keep the new pref network.http.sendOriginHeader set to 1 (send when same-origin) by default. It's not recommended to set it to 2 (always send) due to privacy concerns (might send headers when it shouldn't).

So, let me get this straight. There was a proposal and discussion to implement the Origin header way before they started adding things like "noopener" and the likes... and they never went ahead with it?

Yeah this is definitely something we want. I'll open an issue for it.

EDIT: Issue #1975 (UXP) This does look really straightforward.

This must be one of the easiest backports I've done. No breakages or anything. Literally worked first try after I built it.

Btw I was able to know this Mozilla bug since I always keep an eye on SeaMonkey's IRC. Here's their log talking about Cloudflare: https://ircbot.comm-central.org:8080/seamonkey/20220512

The problem started back on Gab yesterday (didn't see any acknowledgement of issue on their part). Just tried with 31.2 and still there, origin header setting made no difference.

if "Gab" is gab.com, a site that looks decidedly similar to Twitter in layout, I just loaded it up without issue with the origin header pref set to "1".

OK, then I'll have to figure out what it doesn't like about my setup. Thanks for checking.

Appears to be happening again, both on palemoon and firefox 68.3 ESR.

DeltaRayEdge wrote: ↑

2023-01-06, 09:17

Appears to be happening again, both on palemoon and firefox 68.3 ESR.

Please report to CloudFlare.