1858392 - hyatt.com - Cookie handling issues on Linux Mint

Status: RESOLVED WORKSFORME

(Web Compatibility :: Site Reports, defect)

Description

[Raul Bucata]

From github: https://github.com/webcompat/web-bugs/issues/128014.

https://www.hyatt.com
and in particular the member sign in
https://www.hyatt.com/en-US/member/sign-in

Firefox 118.0.1 (64-bit):

Operating System:
Linux Mint 21.2 Cinnamon v 5.8.2, Linux Kernel 6.2.0-33-generic

What seems to be the trouble?(Required)

• Site does not load (blank)

Steps to Reproduce

1. Navigate to: https://www.hyatt.com
2. If that is successful, try the member login which takes you to https://www.hyatt.com/en-US/member/sign-in
3. Once one or the other fails to load, it will never load again

I have tested the steps as described in this issue's previous report https://github.com/webcompat/web-bugs/issues/125913
including creating a new user profile and troubleshooting mode, disabling extensions, etc.

None of these seems to correct the issue. The site loads without any difficulty in Chromium browser. Equally likely to be some issue with Hyatt.com, so what information could I collect to help determine the cause? I do have some similar issues with other sites, though these are far more obscure instances such as web consoles that load within pages. These are are likely different root cause but nevertheless work fine in Chromium and freeze/don't load in Firefox, so could be related. For now I have to go over to chromium to use Hyatt and these other more obscure sites, which is an annoyance given primary preference is Firefox.

Change performed by the Move to Bugzilla add-on.

Comment 1

[Raul Bucata]

The issue was reported via the webcompat.com reporter. Since the issue is related to cookie handling, as the page does not load, we have moved the issue. Please feel free to move the issue to the correct Product and Component.

Comment 2

[clark]

Attachment: log_1st_load_success.tar.bz2

Log File for 1st load of website after clearing cookies (results in success)

Comment 3

[clark]

Attachment: log_any_subsequent_fails_to_load.tar.bz2

log file for any subsequent page load, results in failure. This log was created immediately after the previous one by stopping logging, restarting (to create a new log with new filename), then hitting refresh on the main page.

Comment 4

[clark]

attaching log files, see previous report https://github.com/webcompat/web-bugs/issues/128014#issuecomment-1756066708 for description of cookies that have to be removed in order for page to load

Comment 5

[Kershaw Chang [:kershaw]]

This looks like a site issue to me.
What happens if you send the same request headers to the server?
You could do this by the steps here.

This is what I got when I used curl to send the same request headers as your log:

> GET / HTTP/2
> Host: www.hyatt.com
> user-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:120.0) Gecko/20100101 Firefox/120.0
> accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
> accept-language: en-US,en;q=0.5
> accept-encoding: gzip, deflate, br
> connection: keep-alive
> cookie: tkrm_alpekz_s1.3-ssn=0rhVa56ItLptiAwbuWb3Kq3R9mbCTf1n1vY57o0ICO9bDNXdh4F56M0O5j5ztZ1JN9FDRuNUOC2C0AEcZCzCBLEEmDWKw74EdIzDEB9g0XiR6ETqU5vviJQ2TFXxoXAXL3nh7Yu2kK4IRTXMPNyo4hdKBHMY; tkrm_alpekz_s1.3=0rhVa56ItLptiAwbuWb3Kq3R9mbCTf1n1vY57o0ICO9bDNXdh4F56M0O5j5ztZ1JN9FDRuNUOC2C0AEcZCzCBLEEmDWKw74EdIzDEB9g0XiR6ETqU5vviJQ2TFXxoXAXL3nh7Yu2kK4IRTXMPNyo4hdKBHMY; source-country=US; mb_locale=en-US; mbox=session#67316a37722d4e02ab015de04d770615#1697046910|PC#111697045047653-567987.35_0#1760289850; mboxEdgeCluster=35; vrid=rBEAA2Um2jcDlwEXqAeKAg==; AMCV_D7B27FF452128BAA0A490D4C%40AdobeOrg=-330454231%7CMCIDTS%7C19642%7CMCMID%7C76511670065645102171363653500760046508%7CMCAAMLH-1697649848%7C9%7CMCAAMB-1697649848%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1697052248s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19649%7CvVersion%7C3.1.2; check=true; AMCVS_D7B27FF452128BAA0A490D4C%40AdobeOrg=1; cnry-hf1l5dj2aY=6579be2e461b2bed; s_ecid=MCMID%7C76511670065645102171363653500760046508; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Oct+11+2023+10%3A24%3A09+GMT-0700+(Pacific+Daylight+Time)&version=202302.1.0&isIABGlobal=false&hosts=&landingPath=https%3A%2F%2Fwww.hyatt.com%2F&groups=C0004%3A1%2CC0005%3A1%2CC0003%3A1%2CC0002%3A1%2CC0001%3A1; utag_main=v_id:018b1fc46f7c0099a9b567c7070005046001600900bd0$_sn:1$_se:7$_ss:0$_st:1697046849333$ses_id:1697045049212%3Bexp-session$_pn:1%3Bexp-session$vapi_domain:hyatt.com$dc_visit:1$dc_event:7%3Bexp-session$dc_region:us-west-2%3Bexp-session; rand_1to3=3; fs_sampling=s; rndn=100; newvisit=true; email_90_10=test; t_rnr_tab_capture=; _cs_mk_aa=0.07989533559913942_1697045049284; scPrevPage=Global:LandingPage; s_p26=en-US; cm_dl=1; c_m=Typed%2FBookmarkedTyped%2FBookmarkedundefined; s_cmch=%5B%5B%27typed%2Fbookmarked%27%2C%271697045049288%27%5D%5D; s_cmkw=%5B%5B%27n%2Fa%27%2C%271697045049288%27%5D%5D; s_advcs=%5B%5B%27typed%2Fbookmarked%27%2C%271697045049288%27%5D%5D; s_cc=true; AAMC_hyatt_0=REGION%7C9; aam_uuid=71823969263329780591976573962030486062; _gcl_au=1.1.1030842054.1697045050; _cs_c=0; _cs_id=09efc98c-1e46-ad72-8f66-7a30cbb96309.1697045049.1.1697045049.1697045049.1.1731209049920; _cs_s=1.0.1.1697046850730; _fbp=fb.1.1697045050321.1352529867
> upgrade-insecure-requests: 1
> sec-fetch-dest: document
> sec-fetch-mode: navigate
> sec-fetch-site: none
> sec-fetch-user: ?1
> te: trailers
>
< HTTP/2 429
< content-type: text/html; charset=utf-8
< content-length: 447
< content-encoding: gzip
< access-control-expose-headers: x-kpsdk-ct,x-kpsdk-r
< x-kpsdk-ct: 0pTB5gPMjNYQkSq1K1WuuyaDd3m6I3vhv9DLtuiEa6cbAxKRxEbJ79fLpGyE5iCZktnzAgRkIUD9rN3VjurMjAvJwKUo3pboYfiNV6Itfi5ystFLnbGsicrZJt0OT7BhU666molBgTAgYXwYBUY53mRhzK17
< p3p: CP="This site does not specify a policy in the P3P header"
< vary: Accept-Encoding
< expires: Wed, 11 Oct 2023 19:54:31 GMT
< cache-control: max-age=0, no-cache, no-store
< pragma: no-cache
< date: Wed, 11 Oct 2023 19:54:31 GMT
< set-cookie: tkrm_alpekz_s1.3-ssn=0pTB5gPMjNYQkSq1K1WuuyaDd3m6I3vhv9DLtuiEa6cbAxKRxEbJ79fLpGyE5iCZktnzAgRkIUD9rN3VjurMjAvJwKUo3pboYfiNV6Itfi5ystFLnbGsicrZJt0OT7BhU666molBgTAgYXwYBUY53mRhzK17; Max-Age=86400; Path=/; Expires=Thu, 12 Oct 2023 19:54:31 GMT; HttpOnly; Secure; SameSite=None
< set-cookie: tkrm_alpekz_s1.3=0pTB5gPMjNYQkSq1K1WuuyaDd3m6I3vhv9DLtuiEa6cbAxKRxEbJ79fLpGyE5iCZktnzAgRkIUD9rN3VjurMjAvJwKUo3pboYfiNV6Itfi5ystFLnbGsicrZJt0OT7BhU666molBgTAgYXwYBUY53mRhzK17; Max-Age=86400; Path=/; Expires=Thu, 12 Oct 2023 19:54:31 GMT; HttpOnly
< cipher: TLS_CHACHA20_POLY1305_SHA256
< source-country: DE
< strict-transport-security: max-age=15768000 ; includeSubDomains
<
* Connection #0 to host www.hyatt.com left intact
<!DOCTYPE html><html><head></head><body><script>window.KPSDK={};KPSDK.now=typeof performance!=='undefined'&&performance.now?performance.now.bind(performance):Date.now.bind(Date);KPSDK.start=KPSDK.now();</script><script src="/149e9513-01fa-4fb0-aad4-566afd725d1b/2d206a39-8ed7-437e-a3be-862e0f06eea3/ips.js?tkrm_alpekz_s1.3=0pTB5gPMjNYQkSq1K1WuuyaDd3m6I3vhv9DLtuiEa6cbAxKRxEbJ79fLpGyE5iCZktnzAgRkIUD9rN3VjurMjAvJwKUo3pboYfiNV6Itfi5ystFLnbGsicrZJt0OT7BhU666molBgTAgYXwYBUY53mRhzK17&amp;x-kpsdk-im=CiRlMGM4Y2QyYy1jNGNjLTQ5YmMtYTZjYS00YWUwNDI4YjhiZTI"></script></body></html>%

Comment 6

[clark]

Attachment: Curl Log attached

Comment 7

[clark]

Attachment: curl_response

curl response attached

Comment 8

[clark]

Attachment: curl request from chromium (works)

Comment 9

[clark]

Attachment: curl request from firefox (not working)

Comment 10

[Kershaw Chang [:kershaw]]

This looks like a site issue to me.
The server returns an empty content when using curl to send request headers in comment #9.
I also checked all logs and I can't find anything wrong in them.

Comment 11

[clark]

Site works in chromium on same linux mint host. Curl request log from both chromium and firefox attached. Additional details available at "see also" links above (webcompat). Something in request after initial cookies are loaded causes site to fail next load of any page on this site in firefox (in linux mint), but not chromium. Firefox works on other platforms. Firefox in Windows10 tested in Virtualbox on same host hardware over same internet connection and working, so issue is currently unique to firefox on linux mint.

Comment 12

[clark]

Attachment: hyatt_firefox(curl success)

Resolved, successful CURL attached Firefox 118.0.2 (unconfirmed reason)

Comment 13

[clark]

May close this issue. For unknown reason appears to now be resolved now in 118.0.2. Successful CURL attached to previous post.

Comment 14

[Calin Tanase]

Thanks clark for the update. Closing this as worksforme.