error "YourWebsite.com refused to connect." on some browsers

marq-104

I can't open GURU in SOME web browsers.
I get message "YourWebsite.com refused to connect."
Joomla 4.2.9, php 8.0
Works in Chrome, Arc, Orion,

Microsoft EDGE. error!
Failed to load resource: net::ERR_FAILED
chromewebdata/:1 Refused to display 'https://YourWebsite.com/' in a frame because it set 'X-Frame-Options' to 'sameorigin'.
(index):2704 crbug/1173575, non-JS module files deprecated.
(anonymous) @ (index):2704

Firefox: error!
Using Inspector to see errors in Firefox.
The loading of “https://YourWebsite.com/anmelden” in a frame is denied by “X-Frame-Options“ directive set to “sameorigin“.
"Learn more" link points to this url:
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options

marq-104

Actually I think I need rules to add to Akeeba Admin Tools for GURU.
Do you have a help document about Akeeba Admin Tools?

saguaros

marq-104 Hi

I don't see that error but some related to svg (seems from Quix extension) only:

marq-104

Which browsers did you use?
Some of my browsers are fine. EDGE has the error.
2 others are using EDGE and only one of them gets the error.

marq-104

I get this in EDGE.
A cross-origin resource sharing (CORS) request was blocked because of invalid or missing response headers of the request or the associated preflight request .
To fix this issue, ensure the response to the CORS request and/or the associated preflight request are not missing headers and use valid header values.
Note that if an opaque response is sufficient, the request's mode can be set to no-cors to fetch the resource with CORS disabled; that way CORS headers are not required but the response content is inaccessible (opaque).
7 requests
Request Status Preflight Request (if problematic) Header Problem Invalid Value (if available)
qxif-hands.svg blocked Access-Control-Allow-Origin Missing Header
qxio-ios-book.svg blocked Access-Control-Allow-Origin Missing Header
qxif-hands-helping.svg blocked Access-Control-Allow-Origin Missing Header
index.php?option=com_guru&controller=guruTasks&lesson_id=263&task=get_comments&ajax=1&Itemid=201761&=1692309867768 blocked Access-Control-Allow-Origin Missing Header
index.php?option=com_guru&controller=guruTasks&pid=18&cid=18&task=get_lessons&ajax=1&Itemid=201761&lang=de&=1692309867767 blocked Access-Control-Allow-Origin Missing Header
index.php?option=com_guru&controller=guruTasks&lesson_id=263&task=get_comments&ajax=1&Itemid=201761&=1692309867771 blocked Access-Control-Allow-Origin Missing Header
index.php?option=com_guru&controller=guruTasks&pid=18&cid=18&task=get_lessons&ajax=1&Itemid=201761&lang=de&=1692309867770 blocked Access-Control-Allow-Origin Missing Header

saguaros

marq-104 I tested with Safari / Chrome / Firefox.

Do you have any extension installed in your EDGE browser? Pls try with private window of EDGE and see how it goes.

marq-104

Same error: This content is blocked. Contact the site owner to fix the issue.
Access to XMLHttpRequest at '###index.php?option=com_guru&controller=guruTasks&course_id=18&task=saveDateTime&ajax=1&dif_hour=2&dif_min=31&dif_sec=6&_=1693908674817' from origin '###' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

I also get this for guru_modal.js:990

Uncaught TypeError: Cannot read properties of undefined (reading 'trim') at moveJumpButtons (guru_modal.js:990:24) at HTMLIFrameElement.<anonymous> (guru_modal.js:220:4) at HTMLIFrameElement.dispatch (jquery.js:5430:27) at elemData.handle (jquery.js:5234:28)

marq-104

I FINALLY found the very simple problem.
GURU used my-site.info where my site uses www.my-site.info.
So, using htaccess, I forced everyone to use www.
RewriteEngine On RewriteCond %{HTTP_HOST} !^www\. RewriteRule ^(.*)$ http://www.%{HTTP_HOST}/$1 [R=301,L]