[CORS] Empty Manjaro newspage

Hello,

when I browse to Manjaro - News I got an empty page due there are CORS errors in the browser console.

example:

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/announcements/testing-updates.rss. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://manjaro.org’).
TypeError: NetworkError when attempting to fetch resource.

Tested browsers:
Firefox 84.0.1
Vivaldi 3.4.2066.106
both on Manjaro 20.2 stable

Can this anyone confirm?

On my mobile device there are no such issues.

Merry Christmas
chris_d

Seems confirmed here on both FF and chromium.
Thanks for reporting :slight_smile:

This is usually the domain of @codesardine so ping ping.

@codesardine

Some more CORS related errors on the news page
Some cookies are misusing the recommended “SameSite“ attribute 2
Failed to get subsystem status for purpose Error: Could not establish connection. Receiving end does not exist.
    sendMessage moz-extension://c4de0a51-b72d-4cbd-a918-8926a8d6ea64/content-utils.js:47
content-script.js:95:21
cookie:mjx.menu=renderer%3ANativeMML%26%3Bsemantics%3Atrue%26%3Bcontext%3ABrowser%26%3Bzoom%3ANone news.js:348:13
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/announcements/news.rss. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://manjaro.org’).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/arm/releases.rss. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://manjaro.org’).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/announcements/stable-updates.rss. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://manjaro.org’).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/announcements/testing-updates.rss. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://manjaro.org’).
TypeError: NetworkError when attempting to fetch resource. corsFeedReader.min.js:1:1358
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/announcements/news.rss. (Reason: CORS request did not succeed).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/arm/releases.rss. (Reason: CORS request did not succeed).
TypeError: NetworkError when attempting to fetch resource. corsFeedReader.min.js:1:1358
TypeError: NetworkError when attempting to fetch resource. corsFeedReader.min.js:1:1358
TypeError: NetworkError when attempting to fetch resource. corsFeedReader.min.js:1:1358
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/announcements/stable-updates.rss. (Reason: CORS request did not succeed).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/announcements/testing-updates.rss. (Reason: CORS request did not succeed).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/arm/stable-updates.rss. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://manjaro.org’).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/announcements/unstable-updates.rss. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://manjaro.org’).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/announcements/releases.rss. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://manjaro.org’).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/arm/news.rss. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://manjaro.org’).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/arm/unstable-updates.rss. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://manjaro.org’).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/arm/testing-updates.rss. (Reason: CORS header ‘Access-Control-Allow-Origin’ does not match ‘https://manjaro.org’).
TypeError: NetworkError when attempting to fetch resource. corsFeedReader.min.js:1:1358
TypeError: NetworkError when attempting to fetch resource. corsFeedReader.min.js:1:1358
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/arm/stable-updates.rss. (Reason: CORS request did not succeed).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/announcements/unstable-updates.rss. (Reason: CORS request did not succeed).
TypeError: NetworkError when attempting to fetch resource. corsFeedReader.min.js:1:1358
TypeError: NetworkError when attempting to fetch resource. corsFeedReader.min.js:1:1358
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/announcements/releases.rss. (Reason: CORS request did not succeed).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/arm/news.rss. (Reason: CORS request did not succeed).
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/arm/unstable-updates.rss. (Reason: CORS request did not succeed).
TypeError: NetworkError when attempting to fetch resource. corsFeedReader.min.js:1:1358
TypeError: NetworkError when attempting to fetch resource. corsFeedReader.min.js:1:1358
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://forum.manjaro.org/c/arm/testing-updates.rss. (Reason: CORS request did not succeed).

:wink: