This repository was archived by the owner on Sep 19, 2020. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 15
This repository was archived by the owner on Sep 19, 2020. It is now read-only.
uMatrix block login and logout from bitbucket.org #278
Copy link
Copy link
Open
Description
Prerequisites
- I performed a cursory search of the issue tracker to avoid opening a duplicate issue
- Your issue may already be reported.
- I also searched the existing issues at https://github.com/gorhill/uMatrix/issues
- This is not a support issue or a question
- Support issues and questions are handled at /r/uMatrix
- I tried to reproduce the issue when...
- uMatrix extension is wholly disabled or not installed
- uMatrix is the only extension
- uMatrix with default lists/settings
- using a new, unmodified browser profile
- I am running the latest version of uMatrix
- I checked the documentation to understand that the issue I report is not a normal behavior
- I used the logger to rule out that the issue is caused by my ruleset
Description
Attempting to login to bitbucket.org fails when uMatrix is globally enabled irrespective of whether it is disabled for the bitbucket.org scope.
This presents as a loop on trying to login where the website complains that it was unable to set a cookie (again despite uMatrix being disabled for the scope). During logout it presents as landing back at the website with the status being logged in.
A specific URL where the issue occurs
Steps to Reproduce
- Attempt to login to bitbucket.org.
- Observer failure screen and click try again button.
- Repeat 2 to taste.
Ruleset
atlassian.com * * allow
atlassian.com * cookie allow
atlassian.com * frame inherit
atlassian.com atl-paas.net * allow
atlassian.com atlassian.net * allow
atlassian.com auth0.com * allow
atlassian.com uchi-ui.us-east-1.prod.public.atl-paas.net * allow
bitbucket.org atlassian.com * allow
bitbucket.org atlassian.net * allow
bitbucket.org * * allow
bitbucket.org * frame inherit
bitbucket.org * script allow
bitbucket.org ajax.googleapis.com * allow
bitbucket.org atl-paas.net * allow
bitbucket.org atlassian.com * allow
bitbucket.org atlassian.net * allow
bitbucket.org bitbucket-assetroot.s3.amazonaws.com * allow
bitbucket.org bitbucket-connect-icons.s3.amazonaws.com * allow
bitbucket.org bitbucket-prlinks.us-east-1.prod.public.atl-paas.net frame allow
bitbucket.org bytebucket.org * allow
bitbucket.org cloudfront.net * allow
bitbucket.org d301sr5gafysq2.cloudfront.net * allow
bitbucket.org gravatar.com * allow
bitbucket.org js-agent.newrelic.com * inherit
bitbucket.org newrelic.com * inherit
bitbucket.org optimizely.com * inherit
bitbucket.org statuspage.io * allow
bitbucket.org wp.com * allow
circleci.com atlassian.com * allow
Supporting evidence
It's entirely unclear to me how to properly capture the failure here. The logger shows that all the events are being allowed, I cannot take a screen capture of the dashboard (which would show that both the atlassian and bitbucket scopes are disabled), but I can show the failure screen.
Your environment
- uMatrix version: 1.4.0
- Browser Name and version: FF 78.0.2
- Operating System and version: Ubuntu 18.04.4
promi and bytes-and-bits
Metadata
Metadata
Assignees
Labels
No labels
