Skip to content
This repository was archived by the owner on Sep 19, 2020. It is now read-only.
This repository was archived by the owner on Sep 19, 2020. It is now read-only.

uMatrix block login and logout from bitbucket.org #278

@kortschak

Description

@kortschak

Prerequisites

  • I performed a cursory search of the issue tracker to avoid opening a duplicate issue
  • This is not a support issue or a question
    • Support issues and questions are handled at /r/uMatrix
  • I tried to reproduce the issue when...
    • uMatrix extension is wholly disabled or not installed
    • uMatrix is the only extension
    • uMatrix with default lists/settings
    • using a new, unmodified browser profile
  • I am running the latest version of uMatrix
  • I checked the documentation to understand that the issue I report is not a normal behavior
  • I used the logger to rule out that the issue is caused by my ruleset

Description

Attempting to login to bitbucket.org fails when uMatrix is globally enabled irrespective of whether it is disabled for the bitbucket.org scope.

This presents as a loop on trying to login where the website complains that it was unable to set a cookie (again despite uMatrix being disabled for the scope). During logout it presents as landing back at the website with the status being logged in.

A specific URL where the issue occurs

https://bitbucket.org/

Steps to Reproduce

  1. Attempt to login to bitbucket.org.
  2. Observer failure screen and click try again button.
  3. Repeat 2 to taste.

Ruleset

atlassian.com * * allow
atlassian.com * cookie allow
atlassian.com * frame inherit
atlassian.com atl-paas.net * allow
atlassian.com atlassian.net * allow
atlassian.com auth0.com * allow
atlassian.com uchi-ui.us-east-1.prod.public.atl-paas.net * allow
bitbucket.org atlassian.com * allow
bitbucket.org atlassian.net * allow
bitbucket.org * * allow
bitbucket.org * frame inherit
bitbucket.org * script allow
bitbucket.org ajax.googleapis.com * allow
bitbucket.org atl-paas.net * allow
bitbucket.org atlassian.com * allow
bitbucket.org atlassian.net * allow
bitbucket.org bitbucket-assetroot.s3.amazonaws.com * allow
bitbucket.org bitbucket-connect-icons.s3.amazonaws.com * allow
bitbucket.org bitbucket-prlinks.us-east-1.prod.public.atl-paas.net frame allow
bitbucket.org bytebucket.org * allow
bitbucket.org cloudfront.net * allow
bitbucket.org d301sr5gafysq2.cloudfront.net * allow
bitbucket.org gravatar.com * allow
bitbucket.org js-agent.newrelic.com * inherit
bitbucket.org newrelic.com * inherit
bitbucket.org optimizely.com * inherit
bitbucket.org statuspage.io * allow
bitbucket.org wp.com * allow
circleci.com atlassian.com * allow

Supporting evidence

It's entirely unclear to me how to properly capture the failure here. The logger shows that all the events are being allowed, I cannot take a screen capture of the dashboard (which would show that both the atlassian and bitbucket scopes are disabled), but I can show the failure screen.

Screenshot from 2020-07-16 12-02-57

Your environment

  • uMatrix version: 1.4.0
  • Browser Name and version: FF 78.0.2
  • Operating System and version: Ubuntu 18.04.4

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions