Issues after "strict site isolation"



  • In response to the current Spectre and Meltdown security issues, I activated/enabled the "Strict site isolation" from filters in Vivaldi. (A bit in this vulnerability topic: https://forum.vivaldi.net/topic/23531/strict-site-isolation-surprise)

    Now I'm facing two similar problems:

    1. WhatsApp Web which was in my web panel does not work and it only stays in the https://www.whatsapp.com/ even when I click on the WhatsApp Web link ! (it works when I open the WhatsApp Web in a normal tab)
    2. I cannot log out of my twitter account and also I cannot use Google authentication to login to https://area51.stackexchange.com/ after the google popup closes.

    I assume there is an issue with the session or cookies.

    Any solution, suggestion or similar observations (Other than disabling the "Strict site isolation")?

    my Vivaldi's technical info:

    Vivaldi: 1.13.1008.40 (Stable channel) (64-bit)
    Revision: dd2895aa58c2274ad3c791ca3ce191734e515549-
    OS: Linux
    JavaScript: V8 6.2.414.43
    Flash: 28.0.0.126 /home/XXX/.config/google-chrome/PepperFlash/28.0.0.126/libpepflashplayer.so
    User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.97 Safari/537.36 Vivaldi/1.94.1008.40
    Command Line: /usr/bin/vivaldi-stable --always-authorize-plugins --enable-blink-features=ResizeObserver --flag-switches-begin --site-per-process --flag-switches-end
    Executable Path: /opt/vivaldi/vivaldi
    Profile Path: /home/XXX/.config/vivaldi/Default


    [modedit] moved thread and changed title


  • Moderator

    That is the problem of "Strict site isolation" โ€‘ communicaytion between extension and page gets broken as the processes are seperated.



  • @gwen-dragon But why I cannot log out of my twitter account that is opened in a tab?


  • Moderator

    I have tested, activated "Strict site isolation" and can logout with 1.13 Stable at Twitter on my Debian 8 / KDE 4.



  • @gwen-dragon So what do you suggest? My system is Ubuntu 16.04 (initially it was Unity but I have installed and used gnome since Nov.

    My main intention is to help debug and improve Vivaldi, so I can provide any log file or details that you might find useful.


  • Moderator

    Nice, help and bug hunting is really appreciated!
    Report that as a bug, please. With all information you can give.
    Perhaps our Linux testers and devs can check this.


    How to do a bug report for Vivaldi

    Report each bug separately at https://vivaldi.com/bugreport/
    Describe the issue as precise as you can.
    Add some information about extensions you use.
    Add information about the operating system and version you use.
    Add some information which security tools you use.
    If you have problems with video or audio give us information about your installed codecs and graphics
    card/GPU.
    Add a exact link to the page where the issue comes up and can be tested.
    After reporting the issue, you will receive a confirmation mail from the bugtracker.
    In a reply to this mail you can add more information and files (like screenshots or testcases) as
    attachments and it will be added automatically to bug report.

    If you have questions about the bug please ask in forum first and do not forget to post the VB-XXXXX
    bug number (you can find it in confirmation mail).

    Thanks in advance for helping us to make Vivaldi better!




  • @m-mahmoudian said in Session issues after "strict site isolation":

    Strict site isolation

    I know this does not help you in any way, & i am not trying to be glib [oh, except maybe in one place, below, teehee], but in a funny way i'm half-pleased that you noticed some changes after activating that flag. It thus infers that the flag really IS already functional in V, despite V per my thread you linked only being on c62 not c63 yet [ie, i had been wondering if maybe that flag i found was only a placeholder for future development rather than already functional now].

    I don't use Twatter or Wotsup, so i have not yet noticed any adverse V behaviour since i set the flag.

    Good luck.



  • Enabling strict isolation broke CVim for me.



  • @gwen-dragon Thanks, both were reported: VB-36160 && VB-36161



  • I have noticed that enabling Strict Site Isolation has broken searching via the address bar. I have reported it as a bug but in case anyone comes across this, workarounds include going to the website directly and searching from there or enable the search bar and search through there.

    This bug did not happen on the Windows version of Vivaldi after enabling SSI.

    It also stops the Google Hangouts extension from working, which would make sense on the basis of what SSI does. I've installed YakYak as an alternative.

    From what I understand (though I may be incorrect) the next version of Chromium will enable SSI by default as a security measure against Meltdown.


  • Moderator

    The flag for Site Isolation is a experiemntal feature from Chromium.

    For me if set it crashes reload of some SpeedDial pictures.
    Bug VB-36165 "Reload of SpeedDial crash with 'site isolation'"



  • @tgheretford said in Issues after "strict site isolation":

    enabling Strict Site Isolation has broken searching via the address bar

    I must be misunderstanding you. My SSI flag is enabled, & i can still do this:

    0_1515287610652_20180107_002.png

    I assume i have not understood you correctly?



  • @steffie - what happens if you search using DuckDuckGo?



  • @tgheretford This:

    0_1515545914207_20180110_001.png



  • @steffie What I found is that putting 'd' before the search term works fine. When you don't and just write the search term into the address bar (when search in address field is enabled), it'll crash.


Log in to reply
 

Looks like your connection to Vivaldi Forum was lost, please wait while we try to reconnect.