Chrome 73.0.3683.86 + ClickOnce = ERR_UNSAFE_REDIRECT

406 views
Skip to first unread message

Mail_Box

unread,
Mar 27, 2019, 10:55:19 AM3/27/19
to Chromium-discuss
Hi!

Yesterday evening I received a user report on the problem of the our site operation under Chrome.
Logic of this service requires launching specially developed ClickOnce appications with different parameters.

The check confirmed that in the current version of Chrome the problem is present and when using (by default) to starting the application the meta tags (like '<meta http-equiv="refresh" content="0;URL=/ServicePack/NeoUpdater/Neo_Updater.application?USER=51981 " >'; ) and even when application calling via (<form method="post" action="/ServicePack/NeoUpdater/Neo_Updater.application"><input type="hidden" name="USER" value="51981">)

Work of specially created test page ( https://rdupdate.space/test.php ) under FireFox \ IE \ Chrome: https://www.youtube.com/watch?v=K7li42pjATM

Because Chrome hasn't internal support of ClickOnce it need (like FireFox) one from this plugins:
All 3 was checked with same result.
Its looks as some "security fix", but funniest thing about is a sterling launch of the supposedly "unwanted" application and crash remaining part of page because arisen exception... 

Can't find any way to solve this problem (even via any Chrome settings for current site).
Any ideas and suggestions are applaud.
Thanks in advance!

arthurs...@chromium.org

unread,
Mar 27, 2019, 11:26:12 AM3/27/19
to Chromium-discuss
Here is the related bug number:

This extension is redirecting the users to a javascript-URL, which is not allowed, hence ERR_UNSAFE_REDIRECT.
Chrome used to silently drop the navigation. It started recently display error pages instead.

Some extensions are relying on this weird trick to "ignore" the navigation without displaying any error pages.
Since there is no equivalent extensions API for the moment, this has been reverted on M74 / M75. The revert was also included into M73, it will be delivered to the users if a respin of M73 happens.

Mail_Box

unread,
Mar 27, 2019, 12:25:36 PM3/27/19
to Chromium-discuss
среда, 27 марта 2019 г., 18:26:12 UTC+3 пользователь arthurs...@chromium.org написал:
Here is the related bug number:

Thank You very much!
Can You say anything about (at least approximate) planned dates of that respin or M74 final release?
 

Mail_Box

unread,
Mar 27, 2019, 12:30:50 PM3/27/19
to Chromium-discuss
Sorry, found already:
According to TechDows, Google Chrome version 74 will release for all fans on April 23.

Is any chance on revert before this?
Reply all
Reply to author
Forward
0 new messages