Forums

Re: Blog Post Access Denied

• ScottHope 10,419 Posts

  Tue, Jul 11 2017 1:08 AM

  Hello nopro, I'm glad I'm not the only one with this issue. Although the problem for me seems to be not a code size issue, but some specific Javascript keywords. If I use those keywords then I get an access denied pop-up, irrespective of how much or how little code there actually is.
  
  I have contacted CS also, but the response I got this morning doesn't fill me with much confidence. : (

• nopro17 16,981 Posts

  Tue, Jul 11 2017 7:52 AM

  ScottHope:

  Although the problem for me seems to be not a code size issue, but some specific Javascript keywords. If I use those keywords then I get an access denied pop-up, irrespective of how much or how little code there actually is.

  OK, I wasn't sure exactly what you were doing.  It looks like "error code 15" is something of a generic code that is generated for various conditions.

  It also seems that both of us can reproduce the error.  That's good for debugging purposes ... unless they made the changes intentionally.

  I would not expect CS to know anything about Incapsula.  That would not really be part of their job.  On the other hand, their job would be to pass the information on to the relevant people and get an answer for us.  As long as we know the rules of the game, we can play the game.

   

  Gary

• ScottHope 10,419 Posts

  Tue, Jul 11 2017 8:56 AM

  Gary, would it be worth trying to reproduce the error on a different device that would have a different IP address?

  If it is possible to change my IP address, I might try that to see if it would have any effect. (Not something I've tried before).

• nopro17 16,981 Posts

  Tue, Jul 11 2017 9:27 AM

  I did some more testing.  It turns out that it only looked like it was a size problem.

  I believe that you are on the right track with the keyword issue.

  As I said earlier, my message is nothing more complicated than a list of 100+ links.

  One of them was similar to this:

  <a href="http://www.wgt.com/clubs/the_peoples_club/forum/t/479035.aspx">U.S. Open</a>

  When I removed the link and just left "U.S. Open" in there as plain text, I still got the error.  That's why I originally thought it was a size issue.

  If I replaced the "U.S. Open" text with "12345678901234567890", it worked fine.  Hmm.  That's even longer.  Why didn't I get the error?

  I reverted back to the link and replaced "U.S. Open" with "U.S.&nbsp;Open".  It worked.

  Strangely though, if I create a new message containing only the original link (with the space), it also works.

  Javascript is one thing but I have no reasonable explanation why "U.S. Open" would cause any sort of a problem.

  I guess we just have to guess at what the offending code is until there is some resolution to the problem.

   

• nopro17 16,981 Posts

  Tue, Jul 11 2017 9:29 AM

  ScottHope:

  Gary, would it be worth trying to reproduce the error on a different device that would have a different IP address?

  FWIW, I had asked the owner of our club to try to post the message for me.  He got the same error even though he had a different IP address.  It also implies that this is not a user-specific error.  I suspect that if I took your original code and tried to implement it, I would get the same error as you.

   

• ScottHope 10,419 Posts

  Tue, Jul 11 2017 10:00 AM

  Thanks for all your input Gary. I will point out that...

  .οpen

  is a Javascript method. The stuff that I cannot post are also Javascript methods...

  .οnclick
  .οnmouseover
  .οnmouseout

  ...there are more but I'm not going to list them all. The method has to be applied to a Javascript object, and in my case that is the document object. The document object is the webpage. So if I try to post...

  document.οnclick

  ...for example, I will get the error. (I have used a different character 'o' in the above example to be able to post it here, otherwise I will get the error).

• nopro17 16,981 Posts

  Tue, Jul 11 2017 10:21 AM

  I'm familiar with Javascript.

  Good thinking on the ".open" keyword.  Strip out the space in mine and you get "U.S.Open" which might be interpreted as something nasty ... although it does not explain why I was able to create a message with just the one link to "U.S. Open".

  We might have to use "&" characters (or something else) as a workaround for now.

• ScottHope 10,419 Posts

  Tue, Jul 11 2017 11:00 AM

  Yup, WGT and workarounds go hand in hand. Just hope that WGT don't make things worse with any 'fixes' they try.