Closed Bug 935657 Opened 11 years ago Closed 8 years ago

wfp is blocking Gecko/25 (bad behavior framework)

Categories

(Web Compatibility :: Site Reports, defect)

Product:
Web Compatibility
Component:
Site Reports
Platform:
ARM
Android
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: tnikkel, Assigned: adamopenweb)

References

(
URL
)

Details

(Whiteboard: [serversniff] [sitewait] [country-ca]) 

Visit http://wfp.to/vKc and you get a 403 forbidden with Firefox (release). If you try the same with beta, aurora, and nightly (and other browsers) it works fine.
Looks like user agent sniffing to me....

$ curl -ILA "Mozilla/5.0 (Android; Mobile; rv:25.0) Gecko/25.0 Firefox/25.0" http://wfp.to/vKc
HTTP/1.1 403 Forbidden
Date: Wed, 06 Nov 2013 19:21:42 GMT
Server: Apache
Content-Type: text/html; charset=iso-8859-1

----------------------------------------------

$ curl -ILA "Mozilla/5.0 (Android; Mobile; rv:26.0) Gecko/26.0 Firefox/26.0" http://wfp.to/vKc
HTTP/1.1 302 Found
Date: Wed, 06 Nov 2013 19:21:53 GMT
Server: Apache
Location: http://www.winnipegfreepress.com/breakingnews/Montoya-gets-the-start-for-the-Jets-in-Chicago-tonight-230853761.html
Content-Type: text/html; charset=UTF-8

HTTP/1.1 302 Moved Temporarily
Date: Wed, 06 Nov 2013 19:21:53 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Server: Apache
Set-Cookie: click_mobile=5; Domain=www.winnipegfreepress.com; Expires=Wed, 13-Nov-2013 19:21:53 GMT; Path=/
Cache-Control: no-store, no-cache
Location: http://www.winnipegfreepress.com/breakingnews/Montoya-gets-the-start-for-the-Jets-in-Chicago-tonight-230853761.html?device=mobile
Vary: Accept-Encoding
X-Server-Name: va-c1-r8-u21-b1
Via: 1.1 va-c1-r9-u23-b2:3128 (squid)
Set-Cookie: __llnwmob=1

HTTP/1.1 200 OK
Date: Wed, 06 Nov 2013 19:21:54 GMT
Content-Type: text/html;charset=utf-8
Connection: keep-alive
Server: Apache
Set-Cookie: click_mobile=5; Domain=www.winnipegfreepress.com; Expires=Wed, 13-Nov-2013 19:21:53 GMT; Path=/
Vary: Accept-Encoding
X-Server-Name: va-c1-r8-u21-b1
Via: 1.1 va-c1-r1-u24-b2:3128 (squid)
Component: General → Mobile
Product: Firefox for Android → Tech Evangelism
Does this site work in Firefox 24? Is this another problem with the version number 25 specifically?
Ah Another case of the 25. :)
http://www.otsukare.info/2013/10/29/gecko-25-cursed
See Bug 932026 and Bug 932498

GET /vKc HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate, compress
Host: wfp.to
User-Agent: Mozilla/5.0 (Android; Mobile; rv:24.0) Gecko/24.0 Firefox/24.0

HTTP/1.1 302 Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Date: Wed, 06 Nov 2013 19:37:49 GMT
Location: http://www.winnipegfreepress.com/breakingnews/Montoya-gets-the-start-for-the-Jets-in-Chicago-tonight-230853761.html
Server: Apache

GET /vKc HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate, compress
Host: wfp.to
User-Agent: Mozilla/5.0 (Android; Mobile; rv:25.0) Gecko/25.0 Firefox/25.0

HTTP/1.1 403 Forbidden
Content-Length: 205
Content-Type: text/html; charset=iso-8859-1
Date: Wed, 06 Nov 2013 19:38:12 GMT
Server: Apache

GET /vKc HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate, compress
Host: wfp.to
User-Agent: Mozilla/5.0 (Android; Mobile; rv:26.0) Gecko/26.0 Firefox/26.0

HTTP/1.1 302 Found
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Date: Wed, 06 Nov 2013 19:38:30 GMT
Location: http://www.winnipegfreepress.com/breakingnews/Montoya-gets-the-start-for-the-Jets-in-Chicago-tonight-230853761.html
Server: Apache


The solution is that the side upgrades http://bad-behavior.ioerror.us/ framework they are using. :)
Whiteboard: [serversniff] [contactready] [country-ca]
See Also: → 932498
I sent them an email, who knows if it will find it's way to the right people.
(In reply to Timothy Nikkel (:tn) from comment #4)
> I sent them an email, who knows if it will find it's way to the right people.

Hi Timothy, did you hear anything back from them?
Assignee: nobody → astevenson
→ curl -ILA "Gecko/26.0" http://wfp.to/vKc
HTTP/1.1 302 Found
HTTP/1.1 200 OK

→ curl -ILA "Gecko/25.0" http://wfp.to/vKc
HTTP/1.1 403 Forbidden

→ curl -ILA "Gecko/24.0" http://wfp.to/vKc
HTTP/1.1 302 Found
HTTP/1.1 200 OK

/me says they are using Bad Behavior framework
Bug 932026#c4
Bug 932498
See http://www.otsukare.info/2013/10/29/gecko-25-cursed

To contact wfp asking them to upgrade their "Bad Behavior framework"
Status: NEW → ASSIGNED
Depends on: 932498
Summary: 403 forbidden in release for link that works in beta, aurora, nightly, and other browsers → wfp is blocking Gecko/25 (bad behavior framework)
(In reply to Adam Stevenson from comment #5)
> (In reply to Timothy Nikkel (:tn) from comment #4)
> > I sent them an email, who knows if it will find it's way to the right people.
> 
> Hi Timothy, did you hear anything back from them?

I heard nothing back. But I also couldn't find an appropriate way to contact them, the only way I found I felt like for sure my message would not end up in front of the right eyes, and if it did it would only be because someone heeded my request to forward it to the right person.
(In reply to Timothy Nikkel (:tn) from comment #7) 
> I heard nothing back. But I also couldn't find an appropriate way to contact
> them, the only way I found I felt like for sure my message would not end up
> in front of the right eyes, and if it did it would only be because someone
> heeded my request to forward it to the right person.

Thanks for your help, it's greatly appreciated. I called the support number on the website and was provided an email address to try. Hoping it makes it to the appropriate person.
Received a response that the bug is being reviewed internally.
The issue with version 25 looks to be resolved.

curl -ILA "Gecko/25.0" http://wfp.to/vKc
HTTP/1.1 302 Found
Location: http://www.winnipegfreepress.com/breakingnews/Montoya-gets-the-start-for-the-Jets-in-Chicago-
HTTP/1.1 200 OK
I also brought up the issue regarding FFOS UA not being recognized and served desktop content instead of redirection to http://www.winnipegfreepress.com/?device=mobile. Hoping to resolve both if possible.
Wonderful.
Whiteboard: [serversniff] [contactready] [country-ca] → [serversniff] [sitewait] [country-ca]
Still receiving desktop for FFOS, no response back yet from contact.
→ curl -ILA "Gecko/25.0" http://wfp.to/vKc
HTTP/1.1 302 Found
Date: Wed, 03 Feb 2016 05:16:45 GMT
Server: Apache
Location: http://www.winnipegfreepress.com/breakingnews/Montoya-gets-the-start-for-the-Jets-in-Chicago-tonight-230853761.html
Content-Type: text/html; charset=UTF-8

HTTP/1.1 200 OK
Server: Apache
Last-Modified: Wed, 03 Feb 2016 05:16:30 GMT
X-Server-Name: la-c1-r8-u28-b2
Content-Type: text/html;charset=utf-8
Date: Wed, 03 Feb 2016 05:16:45 GMT
Connection: keep-alive
Status: ASSIGNED → RESOLVED
Closed: 8 years ago
Resolution: --- → FIXED
Product: Tech Evangelism → Web Compatibility
Component: Mobile → Site Reports
You need to log in before you can comment on or make changes to this bug.