Browser-laptop: Fix Cross-Origin Read Blocking (CORB) for extensions

Created on 25 Jul 2018  路  12Comments  路  Source: brave/browser-laptop

Description

Lastpass login page not shown on clean profile

Test plan / Steps to Reproduce

  1. Install 0.23.72
  2. Enable Lastpass from extension
  3. Click on extension icon, shows Internet error unable to connect
  4. Close extension popup, console logs error
    [7544:8104:0725/114251.439:ERROR:extension_function_dispatcher.cc(585)] Unknown Extension API - tabs.getAllInWindow
  5. Click extension popup again shows load spinner but nothing opens

Actual result:
image
image
image

Expected result:
Extension should load

Reproduces how often:
100% on new profile
Reproduced on mac by @LaurenWags

Brave Version

about:brave info:

Brave|
--|--0.23.72
V8|6.8.275.24
rev|c3b1cac
Muon|8.0.2
OS Release|10.0.17134
Update Channel|Release
OS Architecture|x64
OS Platform|Microsoft Windows
Node.js|7.9.0
Brave Sync|v1.4.2
libchromiumcontent|68.0.3440.75

Reproducible on current live release:
No

Additional Information

When lastpass is enabled on Beta and then enabled on release channel it shows correct login popup page. Issue happens only when trying on release channel
image

0.23.x Qchecked-Linux Qchecked-Win64 Qchecked-macOS Qtest-plan-specified bug cr68 featurextensions featurextensionLastPass release-noteinclude releasblocking

Most helpful comment

FIXED: tested on Win 10 x64

Brave: 0.23.105
V8: 6.8.275.24
rev: 9a46f8f5cb22a9daf2af21989aed25911aa6f839
Muon: 8.0.9

Verified no errors when opening the extension popup
Verified able to login to Lastpass account

All 12 comments

Per @darkdh

https://developer.chrome.com/extensions/tabs#method-getAllInWindow
the API has been deprecated

@jonathansampson has updated the LastPass extension to 4.15.2.5 which should resolve the issue 馃槃 馃憤 It may take a while for the change to get picked up on existing installs. Please re-open if you're not seeing the new version 馃槃

No, the API issue has been there for a long time and it is a easy fix.
However, the real problem is some changes related to CrossOriginReadBlocking that causes

newserver.js:1 
Cross-Origin Read Blocking (CORB) blocked cross-origin response https://lastpass.com/lmiapi/login/type?username= with MIME type application/json. See https://www.chromestatus.com/feature/5629709824032768 for more details.

Verified on Ubuntu 17.10 x64

  • 0.23.73 50bdb6df42550dd14f5636770ec8585aa26e361b
  • Muon 8.0.3
  • libchromiumcontent 68.0.3440.75

Verified on Windows x64 with

  • 0.23.73 50bdb6df42550dd14f5636770ec8585aa26e361b
  • Muon 8.0.3
  • libchromiumcontent 68.0.3440.75

Re-opening as issue may have been re-introduced. @darkdh can address this soon with a new Muon

screen shot 2018-08-28 at 12 14 22
These two commits were left over when merging C68 into master

fixed in muon 8.0.9

Verified on Windows 10 x64 using

  • 0.23.105 9a46f8f
  • Muon 8.0.9
  • libchromiumcontent 68.0.3440.84
  • Verified no errors when opening the extension popup
  • Verified able to login to Lastpass account
  • Verified able to autofill credential details
  • Verified background page doesn't throw any error when using the password manager to autofill

Passed with macOS 10.12.6 using

  • 0.23.105 9a46f8f
  • Muon 8.0.9
  • libchromiumcontent 68.0.3440.84
  • verified STR
  • Verified no errors when opening the extension popup
  • Verified able to login to Lastpass account
  • Verified able to autofill credential details
  • Verified background page doesn't throw any error when using the password manager to autofill

PASSed on Ubuntu 17.10 x64

  • 0.23.105 9a46f8f
  • Muon 8.0.9
  • libchromiumcontent 68.0.3440.84

FIXED: tested on Win 10 x64

Brave: 0.23.105
V8: 6.8.275.24
rev: 9a46f8f5cb22a9daf2af21989aed25911aa6f839
Muon: 8.0.9

Verified no errors when opening the extension popup
Verified able to login to Lastpass account

@stellar6 thanks for double checking! Really appreciate it! 馃憤

@kjozwiak this was posted an hour ago mentioning an issue still persists with generating and fill and add new pass on MacOS - https://community.brave.com/t/lastpass-still-not-working/31111

Was this page helpful?
0 / 5 - 0 ratings

Related issues

jonathansampson picture jonathansampson  路  3Comments

luixxiul picture luixxiul  路  3Comments

bsclifton picture bsclifton  路  3Comments

jonathansampson picture jonathansampson  路  3Comments

antiroyalty picture antiroyalty  路  3Comments