open All Channels
seplocked EVE Technology Lab
blankseplocked Am I the only one with this bug?
 
This thread is older than 90 days and has been locked due to inactivity.


 
Author Topic

Trenker
Posted - 2011.07.04 07:25:00 - [1]
 

I filled in a bug report a few days ago, now I got the message "Bug was not reproducable". So I went to another system, installed the client and tested it. The bug did not occur their!? So may I be so bold and ask for two minutes of your time to try something?

Steps:
  1. Launch the client (of course) and start the IGB
  2. Go to http://www.evepanel.net/agentsfinder.html
  3. After a short delay, a message should appear in a bar on top of the page, that asks you to trust the site. Click "Confirm Now"
  4. Grant trust to the site and reload it.
  5. Now the message on top should not appear, the "Location" field should have your current solar system and the "Actions" column should contain "Info" and "Set Destination" links.

The app uses a simple XHR call to http://www.evepanel.net/index.php?eID=tx_evebase_headers to see if a user has trusted the site and to fetch the sent headers. On my system, those headers are never sent !?

When calling http://www.evepanel.net/index.php?eID=tx_evebase_headers manually or not with IGB, the output should look like this
{"trust":false,"values":[]}
Once you confirmed the request trust dialog it should contain the headers sent and look like this
{"trust":true,"values":{"charname":"Trenker","charid":...}}
On my system, that never happens. Am I the only one with this?

I am confused

Hel O'Ween
Men On A Mission
EVE Trade Consortium
Posted - 2011.07.04 10:45:00 - [2]
 

With the old IGB, there was a difference between trusting www.exmaple.com and www.example.com/

I'm not sure if that got carried over to the new IGB and which of the above two options was the rigth one.

Trenker
Posted - 2011.07.06 12:12:00 - [3]
 

Originally by: Hel O'Ween
With the old IGB, there was a difference between trusting www.exmaple.com and www.example.com/

I'm not sure if that got carried over to the new IGB and which of the above two options was the rigth one.


Yes, I tried that. All combinations I could think of, did not make a difference though Sad

Btw: The new IGB expands 'http://www.example.com' to 'http://www.example.com/*", it is not even possible to save the first one, it is always stored this way.
And as I said before, in other clients it work. Only I am excluded.

John Takeshi
Posted - 2011.07.06 15:32:00 - [4]
 

Did you check that your browser does actually send the headers? Are you using a proxy or a software firewall?

Trenker
Posted - 2011.07.09 20:28:00 - [5]
 

At first I was convinced, that the IGB was the problem, because a
curl -H "EVE-CHARNAME: Trenker" -H "EVE-TRUSTED: yes" http://www.evepanel.net/index.php?eID=tx_evebase_headers
from the same machine the EVE client is running, returned
{{"trust":true,"values":{"charname":"Trenker","trusted":"yes"}}

Then I tried something different and, well, I am not a friend of bad language, but:
WTF???? Shocked Shocked

HTTP specification clearly says which characters are allowed in HTTP headers. The underscore is NOT.
Instead of
"EVE-CHARNAME: Trenker"
IGB is actually sending:
"EVE_CHARNAME: Trenker" 

For everyone who is hosting an IGB site with nginx, make sure to add
ignore_invalid_headers   off;
to your config, invalid headers must be allowed!!


 

This thread is older than 90 days and has been locked due to inactivity.


 


The new forums are live

Please adjust your bookmarks to https://forums.eveonline.com

These forums are archived and read-only