reCaptcha chrome安全错误 - 阻止了一个框架

时间:2016-08-24 15:49:23

标签: ruby-on-rails google-chrome recaptcha

我在带有apache服务器的amazon linux实例上运行rails应用程序(https://www.recognitionnotes.com)上的ruby。 reCaptcha已经好几个星期了,但是最新的更新(52.0.2743.82米(64位))可能只在Chrome的recaptcha中引入了一个错误。 Firefox(47.0.1)甚至Internet Explorer 8运行良好,所有3个浏览器都运行Windows 7 64位。非常感谢任何帮助,谢谢。

在Chrome JS控制台中,我收到以下错误:

recaptcha__en.js:170 Uncaught SecurityError: Blocked a frame with origin "https://www.google.com" from accessing a frame with origin "https://www.recognitionnotes.com". Protocols, domains, and ports must match.xk.send 
    @ recaptcha__en.js:170f.kj 
    @ recaptcha__en.js:390f.init 
    @ recaptcha__en.js:385(anonymous function) 
    @ recaptcha__en.js:391(anonymous function) 
    @ VM2211 frame?c=…:183

在网络控制台中,以下是正在执行的请求。

第一个似乎成功的网络请求:

https://www.google.com/recaptcha/api2/frame?c=...
general:
    Request URL:https://www.google.com/recaptcha/api2/frame?c=...
    Request Method:GET
    Status Code:200 
    Remote Address:172.217.4.196:443

response headers:
    alt-svc:quic=":443"; ma=2592000; v="35,34,33,32,31,30"
    alternate-protocol:443:quic
    cache-control:no-cache, no-store, max-age=0, must-revalidate
    content-encoding:gzip
    content-length:10526
    content-type:text/html; charset=utf-8
    date:Wed, 24 Aug 2016 14:44:12 GMT
    expires:Mon, 01 Jan 1990 00:00:00 GMT
    pragma:no-cache
    server:GSE
    status:200
    x-content-type-options:nosniff
    x-xss-protection:1; mode=block
    request headers:
    :authority:www.google.com
    :method:GET
    :path:/recaptcha/api2/frame?c=...
    :scheme:https
    accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
    accept-encoding:gzip, deflate, sdch, br
    accept-language:en-US,en;q=0.8
    dnt:1
    referer:https://www.recognitionnotes.com/
    upgrade-insecure-requests:1
    user-agent:Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.82 Safari/537.36

似乎失败的第二个网络请求

https://www.gstatic.com/recaptcha/api2/r20160817124709/recaptcha__en.js
general:
    Request URL:https://www.gstatic.com/recaptcha/api2/r20160817124709/recaptcha__en.js
    Request Method:GET
    Status Code:200  (from cache)
    Remote Address:172.217.4.67:443

response headers:
    age:76738
    alt-svc:quic=":443"; ma=2592000; v="35,34,33,32,31,30"
    alternate-protocol:443:quic
    cache-control:public, max-age=31536000
    content-encoding:gzip
    content-length:70976
    content-type:text/javascript
    date:Tue, 23 Aug 2016 17:24:39 GMT
    expires:Wed, 23 Aug 2017 17:24:39 GMT
    last-modified:Wed, 17 Aug 2016 20:15:00 GMT
    server:sffe
    status:200
    vary:Accept-Encoding
    x-content-type-options:nosniff
    x-xss-protection:1; mode=block

request headers:
    Provisional headers are shown
    Referer:https://www.google.com/recaptcha/api2/frame?c=...
    User-Agent:Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.82 Safari/537.36

0 个答案:

没有答案