Cdnjs: 404 mega-issue: 404 on some files of tinymce, possibly others too

Created on 22 Dec 2018  Â·  50Comments  Â·  Source: cdnjs/cdnjs

I get 404 error when i try to access some files on cdnjs. if i use VPN, some are OK but others don't work. It's hit and miss situation. Are the devs aware of this issue?

For example this file doesn't load if I use VPN but loads without problem on my local IP: https://cdnjs.cloudflare.com/ajax/libs/tinymce/4.9.2/plugins/print/plugin.min.js

And this file loads if I use VPN but doesn't load on my local IP: https://cdnjs.cloudflare.com/ajax/libs/tinymce/4.9.2/plugins/charmap/plugin.min.js

Server - configuration Bug High Priority
Source
picture ofsahin
👍13

Most helpful comment

Simon from Cloudflare here - we've found an issue with one of the origins behind a load balancer serving cdnjs. This origin has now been removed and the 404s should no longer be occurring.

Can you let me know if you're still seeing errors? Full HTTP request & response headers (or a HAR from the browser) would be useful.

picture simon-says on 27 Dec 2018
👍5 🎉3

All 50 comments

I am seeing this same issue when trying to load angular-mousewheel.min.js. It works from my phone on cellular, but returns a 404 when accessing it from my network.

This is file I am having issues with:
https://cdnjs.cloudflare.com/ajax/libs/angular-mousewheel/1.0.5/mousewheel.min.js

From this page:
https://cdnjs.com/libraries/angular-mousewheel/1.0.5

wolfet picture wolfet on 22 Dec 2018

I've issues with jquery, jquery-lazyload and bootstrap as well. Sometimes it works, sometimes it doesn't. Therefore, security checks with SRI are failing.

seitsu picture seitsu on 22 Dec 2018

Seems to be related to #13165 where some requests are failing to send proper CORS

MattIPv4 picture MattIPv4 on 22 Dec 2018

cc @PeterDaveHello

MattIPv4 picture MattIPv4 on 22 Dec 2018

@MattIPv4 I can do nothing about this, maybe ping @ryankirkman

PeterDaveHello picture PeterDaveHello on 22 Dec 2018
👍2

@PeterDaveHello Ah, hopefully Ryan will appear soon.

MattIPv4 picture MattIPv4 on 22 Dec 2018

Also have it give 404 for my package min files https://cdnjs.com/libraries/jquery.terminal non min files work fine.

jcubic picture jcubic on 23 Dec 2018

I'm getting 404 on https://cdnjs.cloudflare.com/ajax/libs/messenger/1.4.2/css/messenger.css which had been working for at least a year up until today and is listed as a valid URL from https://cdnjs.com/libraries/messenger/1.4.2

NebuPookins picture NebuPookins on 23 Dec 2018

The same issue on some files here https://cdnjs.com/libraries/flag-icon-css

https://cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.2.1/flags/4x3/md.svg

AlexP11223 picture AlexP11223 on 23 Dec 2018

% lwp-request -e 'https://cdnjs.cloudflare.com/ajax/libs/pell/1.0.6/pell.min.css'
404 Not Found
Cache-Control: public, max-age=14400
Connection: close
Date: Sun, 23 Dec 2018 08:23:44 GMT
Server: cloudflare
Content-Type: text/html
Expires: Sun, 23 Dec 2018 12:23:44 GMT
CF-Cache-Status: HIT
CF-RAY: 48d96d88bd9ca857-CDG
Client-Date: Sun, 23 Dec 2018 08:23:44 GMT
Client-Peer: 104.19.199.151:443
Client-Response-Num: 1
Client-SSL-Cert-Issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO ECC Domain Validation Secure Server CA 2
Client-SSL-Cert-Subject: /OU=Domain Control Validated/OU=PositiveSSL Multi-Domain/CN=ssl412106.cloudflaressl.com
Client-SSL-Cipher: ECDHE-ECDSA-AES128-GCM-SHA256
Client-SSL-Socket-Class: IO::Socket::SSL
Client-Transfer-Encoding: chunked
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Served-In-Seconds: 0.000
Strict-Transport-Security: max-age=15780000; includeSubDomains
Title: 404 Not Found

echolet picture echolet on 23 Dec 2018

https://cdnjs.cloudflare.com/ajax/libs/messenger/1.4.2/css/messenger.css appears to be working for me now.

NebuPookins picture NebuPookins on 23 Dec 2018

Could the issue be in CF's file cache? Doesn't appear to be a client issue since it occurs with curl. Tried incognito in Chrome and Firefox too.

Fail:

curl -s -I -X GET 'https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js' -H 'Origin: https://www.google.com'
HTTP/2 404 
date: Mon, 24 Dec 2018 01:44:00 GMT
content-type: text/html
served-in-seconds: 0.000
cf-cache-status: HIT
expires: Mon, 24 Dec 2018 05:44:00 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15780000; includeSubDomains
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 48df615d3e3531e0-SIN

curl -s -I -X GET 'https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css' -H 'Origin: https://www.google.com'
HTTP/2 404 
date: Mon, 24 Dec 2018 01:49:52 GMT
content-type: text/html
served-in-seconds: 0.000
cf-cache-status: EXPIRED
expires: Mon, 24 Dec 2018 05:49:52 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15780000; includeSubDomains
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 48df69f26dbd31b0-SIN

curl -s -I -X GET 'https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css' -H 'Origin: https://www.google.com'
HTTP/2 404 
date: Mon, 24 Dec 2018 01:52:15 GMT
content-type: text/html
served-in-seconds: 0.000
cf-cache-status: HIT
expires: Mon, 24 Dec 2018 05:52:15 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15780000; includeSubDomains
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 48df6d705db6c329-SIN

curl -s -I -X GET 'https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js' -H 'Origin: https://localhost:8080'
HTTP/2 404 
date: Mon, 24 Dec 2018 02:04:23 GMT
content-type: text/html
served-in-seconds: 0.000
cf-cache-status: MISS
expires: Mon, 24 Dec 2018 06:04:23 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15780000; includeSubDomains
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 48df7f331b1c307e-SIN

===

Success:

curl -s -I -X GET 'https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js' -H 'Origin: https://localhost'
HTTP/2 200 
date: Mon, 24 Dec 2018 01:44:12 GMT
content-type: application/javascript
last-modified: Thu, 17 May 2018 09:26:03 GMT
etag: W/"5afd4aab-90b5"
expires: Sat, 14 Dec 2019 01:44:12 GMT
cache-control: public, max-age=30672000
access-control-allow-origin: *
served-in-seconds: 0.001
cf-cache-status: HIT
strict-transport-security: max-age=15780000; includeSubDomains
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 48df61a62d6131e0-SIN

curl -s -I -X GET 'https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js' -H 'Origin: https://www.google.com'
HTTP/2 200 
date: Mon, 24 Dec 2018 01:55:57 GMT
content-type: application/javascript
last-modified: Thu, 17 May 2018 09:26:03 GMT
etag: W/"5afd4aab-90b5"
expires: Sat, 14 Dec 2019 01:55:57 GMT
cache-control: public, max-age=30672000
access-control-allow-origin: *
served-in-seconds: 0.001
cf-cache-status: HIT
strict-transport-security: max-age=15780000; includeSubDomains
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 48df72debcfdc33d-SIN
shirish87 picture shirish87 on 24 Dec 2018

Until today I only had the CORS issue, but now multiple calls return 404.

E.g. of 404 returns:

https://cdnjs.cloudflare.com/ajax/libs/prism/1.15.0/components/prism-ada.min.js
https://cdnjs.cloudflare.com/ajax/libs/prism/1.15.0/components/prism-apacheconf.js
https://cdnjs.cloudflare.com/ajax/libs/prism/1.15.0/components/prism-arduino.js
https://cdnjs.cloudflare.com/ajax/libs/prism/1.15.0/components/prism-arff.js
https://cdnjs.cloudflare.com/ajax/libs/prism/1.15.0/components/prism-arff.min.js
https://cdnjs.cloudflare.com/ajax/libs/prism/1.15.0/components/prism-nim.min.js
https://cdnjs.cloudflare.com/ajax/libs/prism/1.15.0/components/prism-nix.js

Related: #13168

ThomasTJdev picture ThomasTJdev on 24 Dec 2018 
> curl -v https://cdnjs.cloudflare.com/ajax/libs/vuetify/1.2.4/vuetify.js
*   Trying 104.19.198.151...
[...]
< HTTP/2 404
< date: Mon, 24 Dec 2018 15:32:57 GMT
< content-type: text/html
< served-in-seconds: 0.000
< cf-cache-status: HIT
< expires: Mon, 24 Dec 2018 19:32:57 GMT
< cache-control: public, max-age=14400
< strict-transport-security: max-age=15780000; includeSubDomains
< expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
< server: cloudflare
< cf-ray: 48e41fa0b97cc4dd-DUS
[...]
neelance picture neelance on 24 Dec 2018

Also seeing random 404's...example below, though files seem to reappear from time to time, but other files then fail... Requesting from the UK if that's at all relevant!

General:

Request URL: https://cdnjs.cloudflare.com/ajax/libs/react-dom/16.6.3/cjs/react-dom.profiling.min.js
Request Method: GET
Status Code: 404 
Remote Address: 104.19.195.151:443
Referrer Policy: no-referrer-when-downgrade

Response Headers:

cache-control: public, max-age=14400
cf-cache-status: HIT
cf-ray: 48e48355fe0d3629-MAN
content-encoding: br
content-type: text/html
date: Mon, 24 Dec 2018 16:41:01 GMT
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
expires: Mon, 24 Dec 2018 20:41:01 GMT
served-in-seconds: 0.000
server: cloudflare
status: 404
strict-transport-security: max-age=15780000; includeSubDomains
vary: Accept-Encoding
grahamwager picture grahamwager on 24 Dec 2018

Big issue for my company as well....

Smaxor5 picture Smaxor5 on 24 Dec 2018
👍1

While on VPN, I am receiving a 404 on https://cdnjs.cloudflare.com/ajax/libs/plotly.js/1.43.1/plotly.min.js

image

IvanJosipovic picture IvanJosipovic on 24 Dec 2018

@IvanJosipovic so maybe we can just move to #13166 for furthur discussion?

PeterDaveHello picture PeterDaveHello on 24 Dec 2018

@PeterDaveHello _that's where we are_

MattIPv4 picture MattIPv4 on 24 Dec 2018

@MattIPv4 oh yes I replied #13168 late and to the wrong one

PeterDaveHello picture PeterDaveHello on 24 Dec 2018

@MattIPv4, thanks for replying on Twitter. Looks like it's working now. Was the issue resolved or is it on and off?

kickbk picture kickbk on 24 Dec 2018

@kickbk The issue is very much an intermittent one and as far as I know has not yet been resolved. All updates should be posted here regarding this issue.

MattIPv4 picture MattIPv4 on 24 Dec 2018

Got the same issue this morning, but only when requesting via http, not on https

https://cdnjs.cloudflare.com/ajax/libs/foundation/5.5.2/js/vendor/jquery.js

Seems to work now though, so can't share request headers unfortunately

wardbekker picture wardbekker on 25 Dec 2018

I have a reply from the lead for support operations engineering at Cloudflare at last:

I can see that Cloudflare staff are already involved in that thread - I've pinged the relevant engineers internally to look at them.

It may take some time for their attention to get to it, as they live in our Engineering organisation and most the company is on holiday season.

I would assume they are referring to @terinjokes for the engineer already here?

Interpret this response from CF as you wish...

MattIPv4 picture MattIPv4 on 26 Dec 2018

Another example:

https://cdnjs.cloudflare.com/ajax/libs/angular-datatables/0.6.4/angular-datatables.min.js

noahcooper picture noahcooper on 26 Dec 2018

Hello all future responders:

If you are reporting an experience of the issue this thread is for, please comment with the following to help us out in diagnosing the issue:

Resource URL: cdnjs.cloudflare.com/whatever
Were you using SRI?: yes/no
What were the full request headers?:

full REQUEST headers

What were the full response headers?:

full RESPONSE headers

Thank you :D

MattIPv4 picture MattIPv4 on 26 Dec 2018

If it helps, here's a test showing 404 for https://cdnjs.cloudflare.com/ajax/libs/angular-loading-bar/0.9.0/loading-bar.min.js and https://cdnjs.cloudflare.com/ajax/libs/localforage/1.7.3/localforage.min.js: https://www.webpagetest.org/result/181225_SZ_22d168ff0fcde651fa4e04a821e75877/1/details/

Request/Response headers are available in that link (that _Waterfall View_ image is clickable). HTTP Archive (.har) is also available.

CTassisF picture CTassisF on 26 Dec 2018

Here's another example I just managed to reproduce:

URL: https://cdnjs.cloudflare.com/ajax/libs/angular-loading-bar/0.0.1/loading-bar.min.js (accessed directly)

Screenshot: https://imgur.com/a/fNgKMFf

General:
Request URL: https://cdnjs.cloudflare.com/ajax/libs/angular-loading-bar/0.0.1/loading-bar.min.js
Request Method: GET
Status Code: 404 
Remote Address: [2606:4700::6813:c697]:443
Referrer Policy: no-referrer-when-downgrade

Response Headers:
cache-control: public, max-age=14400
cf-cache-status: HIT
cf-ray: 48f6c0656ab04af1-GRU
content-encoding: br
content-type: text/html
date: Wed, 26 Dec 2018 21:48:25 GMT
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
expires: Thu, 27 Dec 2018 01:48:25 GMT
served-in-seconds: 0.001
server: cloudflare
status: 404
strict-transport-security: max-age=15780000; includeSubDomains
vary: Accept-Encoding

Request Headers:
:authority: cdnjs.cloudflare.com
:method: GET
:path: /ajax/libs/angular-loading-bar/0.0.1/loading-bar.min.js
:scheme: https
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9,pt-BR;q=0.8,pt;q=0.7
cache-control: max-age=0
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.28 Safari/537.36

More Info

loading-bar.min.js returns 404, loading-bar.min.css works fine and any other non-existant file like loading-bar.min.foobar return 403 🤔

cesar@CTFs-MBP:~$ lynx -head -source https://cdnjs.cloudflare.com/ajax/libs/angular-loading-bar/0.0.1/loading-bar.min.js
HTTP/1.1 404 Not Found
Date: Wed, 26 Dec 2018 21:55:14 GMT
Content-Type: text/html
Connection: close
Served-In-Seconds: 0.001
CF-Cache-Status: EXPIRED
Expires: Thu, 27 Dec 2018 01:55:14 GMT
Cache-Control: public, max-age=14400
Strict-Transport-Security: max-age=15780000; includeSubDomains
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 48f6ca578f8e4a96-GRU

cesar@CTFs-MBP:~$ lynx -head -source https://cdnjs.cloudflare.com/ajax/libs/angular-loading-bar/0.0.1/loading-bar.min.css
HTTP/1.1 200 OK
Date: Wed, 26 Dec 2018 21:55:17 GMT
Content-Type: text/css
Connection: close
Last-Modified: Thu, 17 May 2018 09:15:29 GMT
ETag: W/"5afd4831-99e"
Expires: Mon, 16 Dec 2019 21:55:17 GMT
Cache-Control: public, max-age=30672000
Access-Control-Allow-Origin: *
Served-In-Seconds: 0.001
CF-Cache-Status: HIT
Strict-Transport-Security: max-age=15780000; includeSubDomains
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 48f6ca720ab74b03-GRU

cesar@CTFs-MBP:~$ lynx -head -source https://cdnjs.cloudflare.com/ajax/libs/angular-loading-bar/0.0.1/loading-bar.min.foobar
HTTP/1.1 403 Forbidden
Date: Wed, 26 Dec 2018 21:55:20 GMT
Content-Type: text/html
Connection: close
Served-In-Seconds: 0.000
Strict-Transport-Security: max-age=15780000; includeSubDomains
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 48f6ca8489d94bd5-GRU
CTassisF picture CTassisF on 26 Dec 2018

4 More 404 URLs:

  1. https://cdnjs.cloudflare.com/ajax/libs/tinymce/4.9.2/plugins/fullscreen/plugin.min.js [now resolved]
  2. https://cdnjs.cloudflare.com/ajax/libs/tinymce/4.9.2/skins/lightgray/skin.min.css [now resolved]
  3. https://cdnjs.cloudflare.com/ajax/libs/bootstrap-table/1.12.1/extensions/filter-control/bootstrap-table-filter-control.min.js
  4. https://cdnjs.cloudflare.com/ajax/libs/tinymce/4.8.3/plugins/wordcount/plugin.min.js

Ex:
Resource URL: cdnjs.cloudflare.com/ajax/libs/tinymce/4.9.2/plugins/fullscreen/plugin.min.js
Were you using SRI?: NO
Request URL: https://cdnjs.cloudflare.com/ajax/libs/tinymce/4.9.2/plugins/fullscreen/plugin.min.js
Request Method: GET
Status Code: 404
Remote Address: 104.19.195.151:443
Referrer Policy: no-referrer-when-downgrade

dougauerbach picture dougauerbach on 26 Dec 2018 
$ curl -s -I -X GET 'https://cdnjs.cloudflare.com/ajax/libs/jquery.lazyload/1.9.1/jquery.lazyload.min.js' -H 'Origin: https://www.google.de'
HTTP/2 404
date: Wed, 26 Dec 2018 22:27:04 GMT
content-type: text/html
served-in-seconds: 0.001
cf-cache-status: MISS
expires: Thu, 27 Dec 2018 02:27:04 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15780000; includeSubDomains
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 48f6f90118df7cae-MUC

$ curl -s -I -X GET 'https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/js/bootstrap.min.js' -H 'Origin: https://www.google.de'
HTTP/2 404
date: Wed, 26 Dec 2018 22:31:25 GMT
content-type: text/html
served-in-seconds: 0.001
cf-cache-status: MISS
expires: Thu, 27 Dec 2018 02:31:25 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15780000; includeSubDomains
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 48f6ff5ce9757e93-MUC

$ curl -s -I -X GET 'https://cdnjs.cloudflare.com/ajax/libs/jquery/1.11.1/jquery.min.js' -H 'Origin: https://www.google.de'
HTTP/2 404
date: Wed, 26 Dec 2018 22:35:30 GMT
content-type: text/html
served-in-seconds: 0.000
cf-cache-status: MISS
expires: Thu, 27 Dec 2018 02:35:30 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15780000; includeSubDomains
content-security-policy-report-only: default-src https: data: wss: 'unsafe-eval' 'unsafe-inline'; report-uri https://cdnjs.cloudflare.com/cdn-cgi/beacon/csp?req_id=48f7055cd9587d0e
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 48f7055cd9587d0e-MUC

$ curl -s -I -X GET 'https://cdnjs.cloudflare.com/ajax/libs/respond.js/1.4.2/respond.min.js' -H 'Origin: https://www.google.de'
HTTP/2 404
date: Wed, 26 Dec 2018 22:38:17 GMT
content-type: text/html
served-in-seconds: 0.000
cf-cache-status: MISS
expires: Thu, 27 Dec 2018 02:38:17 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15780000; includeSubDomains
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 48f7096c1aef7e93-MUC

$ curl -s -I -X GET 'https://cdnjs.cloudflare.com/ajax/libs/lightbox2/2.10.0/css/lightbox.min.css' -H 'Origin: https://www.google.de'
HTTP/2 404
date: Wed, 26 Dec 2018 22:40:26 GMT
content-type: text/html
served-in-seconds: 0.001
cf-cache-status: MISS
expires: Thu, 27 Dec 2018 02:40:26 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15780000; includeSubDomains
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 48f70c959ee97cc6-MUC
seitsu picture seitsu on 26 Dec 2018

I have the same issue when try to download https://cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.map. Sometimes I get requested file in response, sometimes I receive 404.

image

UPDATE
All requests were sent by typing full URI in the address bar of Google Chrome. Added screenshots of request and response headers for both successful and failed requests.

image

image

lightel picture lightel on 27 Dec 2018

@lightel if you can provide request and response headers for when it fails, alongside if SRI was being used, that would be great :D

MattIPv4 picture MattIPv4 on 27 Dec 2018

@lightel if you can provide request and response headers for when it fails, alongside if SRI was being used, that would be great :D

@MattIPv4 I have updated my comment with screenshots of request and response headers.

lightel picture lightel on 27 Dec 2018

Simon from Cloudflare here - we've found an issue with one of the origins behind a load balancer serving cdnjs. This origin has now been removed and the 404s should no longer be occurring.

Can you let me know if you're still seeing errors? Full HTTP request & response headers (or a HAR from the browser) would be useful.

simon-says picture simon-says on 27 Dec 2018
👍5 🎉3

@simon-says everything looks fine now. Thanks for handling it so fast!

lightel picture lightel on 27 Dec 2018

@simon-says, thanks for sorting it out. Everything looks fine for me too. CORS errors have disappeared from all my sites and resources no longer give 404 errors in Visual Studio.

robinwilson16 picture robinwilson16 on 27 Dec 2018

I'm going to close this issue now, if anyone has any further issues relating to this, please do reply and mention me so that I can get straight on it again. I hope however, that these issues are now fixed.

MattIPv4 picture MattIPv4 on 28 Dec 2018

Hi @MattIPv4, we're getting some intermittent 404 errors when downloading some libraries from cdnjs. We were able to catch one of those error with a workstation so I'm happy to post the full request to help you (captured from Firefox):

{
    "log": {
      "version": "1.2",
      "creator": {
        "name": "WebInspector",
        "version": "537.36"
      },
      "pages": [
        {
          "startedDateTime": "2019-02-01T16:26:17.207Z",
          "id": "page_1",
          "title": "https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.css.map",
          "pageTimings": {
            "onContentLoad": 353.3110000007582,
            "onLoad": 587.601000000177
          }
        }
      ],
      "entries": [
        {
          "startedDateTime": "2019-02-01T16:26:17.207Z",
          "time": 103.66900000008172,
          "request": {
            "method": "GET",
            "url": "https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.css.map",
            "httpVersion": "http/2.0",
            "headers": [
              {
                "name": ":method",
                "value": "GET"
              },
              {
                "name": ":authority",
                "value": "cdnjs.cloudflare.com"
              },
              {
                "name": ":scheme",
                "value": "https"
              },
              {
                "name": ":path",
                "value": "/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.css.map"
              },
              {
                "name": "pragma",
                "value": "no-cache"
              },
              {
                "name": "cache-control",
                "value": "no-cache"
              },
              {
                "name": "upgrade-insecure-requests",
                "value": "1"
              },
              {
                "name": "user-agent",
                "value": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36"
              },
              {
                "name": "accept",
                "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8"
              },
              {
                "name": "accept-encoding",
                "value": "gzip, deflate, br"
              },
              {
                "name": "accept-language",
                "value": "fr-FR,fr;q=0.9,en-US;q=0.8,en;q=0.7"
              }
            ],
            "queryString": [],
            "cookies": [],
            "headersSize": -1,
            "bodySize": 0
          },
          "response": {
            "status": 404,
            "statusText": "",
            "httpVersion": "http/2.0",
            "headers": [
              {
                "name": "status",
                "value": "404"
              },
              {
                "name": "date",
                "value": "Fri, 01 Feb 2019 16:26:17 GMT"
              },
              {
                "name": "content-type",
                "value": "text/html"
              },
              {
                "name": "served-in-seconds",
                "value": "0.001"
              },
              {
                "name": "strict-transport-security",
                "value": "max-age=15780000; includeSubDomains"
              },
              {
                "name": "expect-ct",
                "value": "max-age=604800, report-uri=\"https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct\""
              },
              {
                "name": "server",
                "value": "cloudflare"
              },
              {
                "name": "cf-ray",
                "value": "4a25c761ad2e91ee-EWR"
              },
              {
                "name": "content-encoding",
                "value": "br"
              }
            ],
            "cookies": [],
            "content": {
              "size": 564,
              "mimeType": "text/html"
            },
            "redirectURL": "",
            "headersSize": -1,
            "bodySize": -1,
            "_transferSize": 223
          },
          "cache": {},
          "timings": {
            "blocked": 5.593999999597203,
            "dns": -1,
            "ssl": -1,
            "connect": -1,
            "send": 0.12899999999999956,
            "wait": 94.16699999990745,
            "receive": 3.7790000005770708,
            "_blocked_queueing": 0.879999999597203
          },
          "serverIPAddress": "104.19.198.151",
          "_initiator": {
            "type": "other"
          },
          "_priority": "VeryHigh",
          "connection": "39087",
          "pageref": "page_1"
        }
      ]
    }
  }
TristanApc picture TristanApc on 1 Feb 2019

@TristanApc Please post in #13165 as that is the active issue and this issue is directly related.

MattIPv4 picture MattIPv4 on 1 Feb 2019

If it helps, I encountered this issue against yet another URL:

➜  ~ curl -I https://cdnjs.cloudflare.com/ajax/libs/monaco-editor/0.10.1/min/vs/loader.js 
HTTP/2 404 
date: Fri, 01 Feb 2019 19:55:14 GMT
content-type: text/html
served-in-seconds: 0.000
cf-cache-status: HIT
expires: Fri, 01 Feb 2019 23:55:14 GMT
cache-control: public, max-age=14400
strict-transport-security: max-age=15780000; includeSubDomains
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
server: cloudflare
cf-ray: 4a26f975add56b37-WAW
krzysztof-jelski picture krzysztof-jelski on 1 Feb 2019

Apologies for reporting on this thread, but this is happening again.

https://cdnjs.cloudflare.com/ajax/libs/tinymce/5.2.1/jquery.tinymce.min.js
-- yields a connection timeout.

On Fri, Feb 1, 2019 at 11:56 AM krzysztof-jelski notifications@github.com
wrote:

If it helps, I encountered this issue against yet another URL:

➜ ~ curl -I https://cdnjs.cloudflare.com/ajax/libs/monaco-editor/0.10.1/min/vs/loader.js

HTTP/2 404

date: Fri, 01 Feb 2019 19:55:14 GMT

content-type: text/html

served-in-seconds: 0.000

cf-cache-status: HIT

expires: Fri, 01 Feb 2019 23:55:14 GMT

cache-control: public, max-age=14400

strict-transport-security: max-age=15780000; includeSubDomains

expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"

server: cloudflare

cf-ray: 4a26f975add56b37-WAW

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/cdnjs/cdnjs/issues/13166#issuecomment-459848122, or mute
the thread
https://github.com/notifications/unsubscribe-auth/AVvmWjSETE5O9ghfShdFbgX33HO2sHZUks5vJJvqgaJpZM4ZfdkA
.

dougauerbach picture dougauerbach on 15 Apr 2020 
curl -I https://cdnjs.cloudflare.com/ajax/libs/tinymce/5.2.1/jquery.tinymce.min.js

HTTP/2 200 
date: Wed, 15 Apr 2020 18:20:14 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 25 Mar 2020 03:01:06 GMT
etag: W/"5e7ac972-19eb"
expires: Mon, 05 Apr 2021 18:20:14 GMT
cache-control: public, max-age=30672000
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
served-in-seconds: 0.001
cf-cache-status: HIT
age: 1567666
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
strict-transport-security: max-age=15780000; includeSubDomains
server: cloudflare
cf-ray: 5847adee2985e680-LHR
alt-svc: h3-27=":443"; ma=86400, h3-25=":443"; ma=86400, h3-24=":443"; ma=86400, h3-23=":443"; ma=86400
cf-request-id: 0220ab08dd0000e68014234200000001

Working for me. Could you provide any further info on the context where it's failing?

MattIPv4 picture MattIPv4 on 15 Apr 2020

@MattIPv4 I've switched to https://www.jsdelivr.com/ long ago it even support fetching files from GitHub branch, I can have devel version of my library. You can use any url don't only those that someone added.

jcubic picture jcubic on 15 Apr 2020

@jcubic thanks for the info, not sure it's really helpful in diagnosing the issue this person is having though.

MattIPv4 picture MattIPv4 on 15 Apr 2020

Thanks, Matt. Here's my curl output:

curl -I
https://cdnjs.cloudflare.com/ajax/libs/tinymce/5.2.1/jquery.tinymce.min.js
HTTP/1.1 522
Date: Wed, 15 Apr 2020 19:08:07 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache
CF-Cache-Status: MISS
Expect-CT: max-age=604800, report-uri="
https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Strict-Transport-Security: max-age=15780000; includeSubDomains
Server: cloudflare
CF-RAY: 5847f2f31afbfdbd-PDX
alt-svc: h3-27=":443"; ma=86400, h3-25=":443"; ma=86400, h3-24=":443";
ma=86400, h3-23=":443"; ma=86400
cf-request-id: 0220d62bf20000fdbdbb855200000001

On Wed, Apr 15, 2020 at 11:21 AM Matt (IPv4) Cowley <
[email protected]> wrote:

curl -I https://cdnjs.cloudflare.com/ajax/libs/tinymce/5.2.1/jquery.tinymce.min.js

HTTP/2 200
date: Wed, 15 Apr 2020 18:20:14 GMT
content-type: application/javascript; charset=utf-8
last-modified: Wed, 25 Mar 2020 03:01:06 GMT
etag: W/"5e7ac972-19eb"
expires: Mon, 05 Apr 2021 18:20:14 GMT
cache-control: public, max-age=30672000
vary: Accept-Encoding
timing-allow-origin: *
access-control-allow-origin: *
served-in-seconds: 0.001
cf-cache-status: HIT
age: 1567666
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
strict-transport-security: max-age=15780000; includeSubDomains
server: cloudflare
cf-ray: 5847adee2985e680-LHR
alt-svc: h3-27=":443"; ma=86400, h3-25=":443"; ma=86400, h3-24=":443"; ma=86400, h3-23=":443"; ma=86400
cf-request-id: 0220ab08dd0000e68014234200000001

Working for me. Could you provide any further info on the context where
it's failing?

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/cdnjs/cdnjs/issues/13166#issuecomment-614200489, or
unsubscribe
https://github.com/notifications/unsubscribe-auth/AFN6MWVTY3GUCRJFEBTTLG3RMX3JNANCNFSM4GL53EAA
.

dougauerbach picture dougauerbach on 15 Apr 2020

Thanks! I've just raised an incident on our status page for this as I and others have now reproduced the 522 & 523 responses: https://status.cdnjs.com/incidents/gfql0xfm7d19

My guess would be that this is part of the ongoing incident Cloudflare are having, but I can't confirm that for sure: https://www.cloudflarestatus.com/incidents/g7nd3k80rxdb

MattIPv4 picture MattIPv4 on 15 Apr 2020

Hi @MattIPv4!
Sorry for reporting on this thread, but I've been getting a lot of 404 errors when requesting files from cdnjs.
I can't even load https://cdnjs.com properly, getting a lot of cors errors in console.


Details about cdnjs.com loading

image
image

Here's the output of curl -I https://cdnjs.cloudflare.com/ajax/libs/jquery/1.12.4/jquery.min.js

HTTP/1.1 404 Not Found 
Date: Sat, 25 Apr 2020 11:01:16 GMT
Content-Length: 400
Connection: keep-alive
Set-Cookie: __cfduid=d857d8172d1f87a07af34d79c4b7c1ff21587812476; expires=Mon, 25-May-20 11:01:16 GMT; path=/; domain=.cdnjs.cloudflare.com; HttpOnly; SameSite=Lax
CF-Cache-Status: HIT
Age: 22
Expires: Sat, 25 Apr 2020 15:01:16 GMT
Cache-Control: public, max-age=14400
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 589790acebc8c29f-FRA
cf-request-id: 025298c0100000c29f423b1200000001
TryHardDood picture TryHardDood on 25 Apr 2020

@TryHardDood Hm, that doesn't sound good. If you're still seeing the failure on cdnjs.com, could you load the page with developer tools open, and then under the network tab use the 'Export HAR' option (little download icon in the toolbar of the network tab)?

MattIPv4 picture MattIPv4 on 25 Apr 2020

@MattIPv4
Here you go. (I renamed it to .log because github didn't let me upload .har files)

cdnjs.com.har.log

TryHardDood picture TryHardDood on 25 Apr 2020

Hey @TryHardDood, thanks for reporting this. We've got our team looking at it now to see if they can figure out what's going on here. I'll make sure to keep you updated with any progress :)

MattIPv4 picture MattIPv4 on 27 Apr 2020
👍1
Was this page helpful?
0 / 5 - 0 ratings

Related issues

kumarharsh picture kumarharsh  Â·  35Comments
wangkanai picture wangkanai  Â·  22Comments
mikewest picture mikewest  Â·  19Comments
nikolay picture nikolay  Â·  57Comments
eastling picture eastling  Â·  18Comments