Google auth issue

[lazyest]

Can someone advice any steps to fix issue

https://admin.hossted.com/signin didn't show google login button. It complains to

Code: Select all

The resource from “https://accounts.google.com/gsi/client” was blocked due to MIME type mismatch (X-Content-Type-Options: nosniff).

theoretically I'm able to influence to site's codebase but need exact recomendation

[Moonchild]

exact recomendation

Web server configuration. Either supply the correct MIME type for the file fetched, or do not include the "nosniff" header (which prevents browsers from guessing content type based on response content)

[lazyest]

But anyhow, is there any way to somehow lower strict policy following for these kind of issues? Its not the only case of PM going holier then Pope Its mostly about https following I think, with nosniff and self-signed certificates also comes to mind as examples of too strict policy following without easy way to get exception

[Moonchild]

going holier then Pope

... following the standards isn't going "holier than the Pope".
In fact, the compromises mainstream browsers make to "connect silently at all costs" are pretty bad when you look at the intent of the standards they break with just to stop the complaints from users who don't understand.

If a server explicitly adds "nosniff" to their configuration, then they explicitly tell the browser to "use only what the server tells you the file type is". Making exceptions to that literally makes the whole premise behind that spec moot.

I won't get into the whole "don't use self-signed certs on production" explanation. read a basic network security course document to know why.

[lazyest]

thats pretty weird. I've installed recent PM to some windows7 VM and its working, showing google button OK but still shows nothing in my linux one. What else can I debug? I've tried Incognito mode also, same result

[therube]

Try Safe Mode.

If that doesn't work, test in a new, clean Profile.

[lazyest]

Try Safe Mode.

If that doesn't work, test in a new, clean Profile.

Private mode was one of the first ideas and it didn't help

[lazyest]

its working on clear profile.

[Kris_88]

its working on clear profile.

The implication is that this is checked before the question is even asked.

[Moonchild]

Private mode was one of the first ideas and it didn't help

Safe mode is not the same as private browsing. Did you check the link?

[lazyest]

Private mode was one of the first ideas and it didn't help

Safe mode is not the same as private browsing. Did you check the link?

sure. Same thing in SM. I assume thats something wrong with profile after all but I have pretty much saved passwords etc and have no sync anywhere external so maybe there is a safe list of files to remove from profile dir to cleanup everything but passwords? Quick look shows dozens of unsure ones for me

[lazyest]

Just in case someone else will came here and will search for solution, I've created new profile and copied actual two files from old one, key4.db, logins.json and everything was fixed after