200 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self'; X-UA-Compatible: IE=Edge X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Telligent-Evolution: 12.x Pragma: no-cache Connection: close Accept-Ranges: bytes Cache-Control: no-store, no-cache, max-age=0 Date: Fri, 01 Dec 2023 12:53:30 GMT ETag: "0x8DBE573EDBA1945" Set-Cookie: .te.csrf=1cp2te4RF1XydSD5fCwg7kOQxGvK4xMrGWxAjYEcs4Y; path=/; secure; SameSite=Lax Set-Cookie: .te.auth=5l6GkoPu9%2bhSMIZ2P3ZrGj%2bZVTI0vDIjAAPGfSsmXIcg%2boWJ%2bbYGIWcLYzSXSROg5pECkHLT%2fXq138GR7wUGLKt37uKl2cIbK16ZRBq0vmo0p3b1ElC1Dk%2ft%2bJ4IoSrPtk2nJeMRMyKDTgzsP7f7Cz10OcxdMLAe%2fzPe%2fBXJaDWvvPVy9eyNY%2bCE5CDop4RGfPwt7STHjAxMMNwZRIyBmTwC%2bb2MDeU%2bfYzL3XLv%2b1f2%2bxvjFfbS7zkYgQvd%2fRhciBDFoV2%2bnV38eALuARGang%3d%3d; path=/; secure; HttpOnly; SameSite=Lax Set-Cookie: e14Guest=1; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure; HttpOnly Set-Cookie: e14Country=NL; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure; HttpOnly Set-Cookie: e14Language=en; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure; HttpOnly Set-Cookie: e14TimeZone=Etc/UTC; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure; HttpOnly Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=8 Server-Timing: origin; dur=25 Server-Timing: ak_p; desc="1701435210501_1600474645_50280354_3242_3275_2_6_-";dur=1 Strict-Transport-Security: max-age=86400 ; includeSubDomains ; preload #set ($UserId = $core_v2_user.Accessing.Id) #set ($Roles = $core_v2_utility.MakeList('Moderators', 'Almost Admins', 'Administrators')) #set ($IsAdminLike = $e14_utils.IsUserInRoleOrAdmin($UserId, $Roles)) #if($IsAdminLike == 'False') #end
Actions
Forum Thread Details
  • State Suggested Answer
  • Replies 23 replies
  • Answers 3 answers
  • Subscribers 17 subscribers
  • Views 533 views
  • Users 0 members are here
Related

Can't add a "raw" URL in a hyperlink, and site ideas

shabaz

Hi,

I tried adding a comment to a blog, with a hyperlink (i.e. using the Insert->Link selection from the editor toolbar) and the URL was (without the spaces of course):

https : // raw . githubusercontent.com/shabaz123/adc_board_basic/main/pico_adc_basic.pdf

However, when I do that, it generates an error.

image

My question is, do I get an award for finding two bugs in a weekend : )

Top Replies

  • 0

    test (failed)

    linked

    embedded

    I tried the raw link to blob didn't work: This is a  "blob:github.com/c809231e-8ca2-49a4-8dc6-7e6513de863f" link I get when downloading the raw file - but that's not permanent. Github only serves it once.

    The permalink on github points to the html page with PDF embedded. I didn't find a way to serve the raw pdf repeatedly

  • 0 in reply to Jan Cumps

    your link does serve the PDF repeatedly, in my browser. But couldn't get the forum to accept it either.

  • 0
    shabaz said:
    https : // raw . githubusercontent.com/shabaz123/adc_board_basic/main/pico_adc_basic.pdf

    Hmm. Let me test a few things ...

    [BEGIN DIAGNOSIS]

    Aha ... we're getting a 403 from something (Akamai?) when POSTing the reply itself.

    image

    Hmm, can't edit and slip it in ...

    How about non-linked as text: raw.githubusercontent.com/shabaz123/adc_board_basic/main/pico_adc_basic.pdf

    Well ... look like that worked. How about a link minus the protocol:

    ://raw.githubusercontent.com/shabaz123/adc_board_basic/main/pico_adc_basic.pdf

    //raw.githubusercontent.com/shabaz123/adc_board_basic/main/pico_adc_basic.pdf

    Well, hey, that works too - the "protocol-dynamic" notation above seems to work ... perhaps a filtering "bug".

    What about a change of domain:

    https://raw.github.com/shabaz123/adc_board_basic/main/pico_adc_basic.pdf

    Seems like that worked too.

    Seems there is a block on https://raw.githubusercontent.com? Nope. But if I have /shabaz123 added to it, then it 403's. Seems anything in a subpath of that domain is getting 403'd on posting.

    [END OF DIAGNOSIS]

    - Gough

  • 0 in reply to Gough Lui

    Nice, interesting workaround/(slash bug depending if it's seen from a spam prevention viewpoint or not!) with the minus-protocol method.

  • 0 in reply to Gough Lui

    Thanks, Gough, I'll raise this with the server admin team.

  • 0

    This is really weird.

    I fully believe you when you say you had problems. But are you still having problems now? I ask because I've been trying to check this and I've been having no problems at all.

    https://raw.githubusercontent.com/shabaz123/adc_board_basic/main/pico_adc_basic.pdf

    Am I missing something here? 

  • 0 in reply to Dudley

    Hi Dudley,

    I hope you're well. The issue still occurs, I recorded it in a video here:

    However, I think it's super-low-pri since it seems there are some workarounds.

    I think it's not worth fixing (unless there are some other knock-on effects or other issues, e.g. for spam prevention purposes or whatever).

    Thanks for checking!

  • 0 in reply to shabaz
    shabaz said:
    I think it's not worth fixing

    Not everyone that visits the site thinks to go through such amazing levels of diagnosis as those in this thread, and if it doesn't work for them they'll get fed up, frustrated and/or bounce away. I'd say it should be fixed Slight smile

  • 0 in reply to Dudley

    Testing - nope. Same issue:

    image

    I'm seeing a 403 on the post request. The response was:

    image

    You don't have permission to access "http://community.element14.com/utility/scripted-file.ashx?" on this server.

Reference #18.b61dd017.1699999398.2922e94

    I suspect this is being served out of an Akamai CDN rather than from the origin server - if you're testing the site direct to the origin server, maybe you're bypassing the CDN which is causing the issue  ? Or maybe different CDN edge points have inconsistent WAF rules which are causing unexpected conflicting behaviour?

    Just tested with a fresh Microsoft Edge browser with no extensions - no change:

    image

    I suspect it is not browser-dependent. I'll try a different Australian ISP now ... okay - tried all of the following, but none worked:

    • Telstra
    • Optus
    • Vodafone/TPG
    • Western Sydney University
    • Oracle Cloud (AU, but geo-IPs as US)

    Could it be a user-privilege issue as well ... perhaps the system gives admins a bit more freedom?

    - Gough

  • 0 in reply to shabaz

    Thanks for this Shabaz - if a picture speaks a 1,000 words and a video is 1,000 pictures, that makes a video 1,000,000 words, right?

  • 0 in reply to Dudley

    I've worked out what this is. It's part of one of our security tools (which means I can't go into too much detail - the bad guys might be reading) with a false positive.

    I can fix it, but we only just had a release so it'll take a while to get out the door.

    And yes   - it was happening and a CDN level, and the reason I wasn't getting it is because I've got my home IP whitelisted from this rule. Have a biscuit! Make it a good one!