Comments (6)
Something is fishy:
Line 722 in 6204670
from syncthing.
Ah, this is apparently caused by /meta.js
not being exempt from our authentication check. Maybe we need to add /meta.js
here?
Line 54 in 6204670
At least the content doesn't look sensitive to me:
var metadata = {
"authenticated": true,
"deviceID": "XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
"deviceIDShort": "XXXXXX"
};
from syncthing.
I don't follow. There's nothing wrong with the content type. It's behind auth, as many other things. The OP's issue seems to be some proxy problem together with trying to interpret a retuned 403 error.
from syncthing.
The problem is that we're loading meta.js
as regular frontend code:
syncthing/gui/default/index.html
Line 1080 in 6204670
Once strict MIME type handling is enforced via X-Content-Type-Options: nosniff, this ends up as an error in the browser console.
Judging from a quick test, it doesn't break the UI even when X-Content-Type-Options: nosniff
is added by a reverse-proxy. So it's more of an annoyance than a real bug and mostly not the cause of the problem observed by the user.
My proposal would be to exempt meta.js from authentication and instead populate its authenticated
field dynamically:
Lines 717 to 721 in 6204670
from syncthing.
It doesn't break the UI at all as far as I can tell. There's an error in the console about it when you're not logged in, that's all. Potentially this could be nicer, perhaps we don't try to load the resource when not logged in, but I don't see a bug or problem here...
From what I can see in the forum thread the OP had some entirely unrelated problem with the proxy or their browser plugins and just latched onto this as the visible error in the console.
from syncthing.
From what I can see in the forum thread the OP had some entirely unrelated problem with the proxy or their browser plugins and just latched onto this as the visible error in the console.
Aye. nginx-proxy-manager has some interesting config bits:
from syncthing.
Related Issues (20)
- [Not a Bug] apt.syncthing.net is not accesible over IPv6 HOT 5
- Transcoding fes HOT 1
- Starting Syncthing manually or automatically has different configurations HOT 1
- Encrypted Receive-Only Folders Syncing with Each Other HOT 1
- UX/UI: Inconsistent information and inconclusive "override changes" action button in Out of Sync situation HOT 3
- "Watching for changes encountered an event outside of the filesystem root" when the folder path uses ~ and has a trailing space HOT 4
- Add time remaining to remote devices HOT 1
- The Web UI defaults to Filipino on Finnish browsers.
- lib/api: /svc/lang disregards the passed quality values
- Syncthing v1.27.11 on desktop claims there are Local Additions for all folders from Android v1.27.10 HOT 18
- Immediate crash after auto-upgrade to v1.27.11 on OpenBSD 7.5 HOT 6
- Use BLAKE-3 hashing HOT 3
- elements not synced, stuck and no display HOT 2
- Syncthing never sync if folder settings is only upload on master and only download on client HOT 4
- Sync status stays at 'Syncing xx%" when remote device pauses the folder. HOT 3
- Add folder priority HOT 2
- Move files from source to destination HOT 1
- Rename `/meta.js` request to `/meta` to avoid caching problems? HOT 3
- Feedback on a potential hazard caused by silent hard disk errors, which I believe is crucial! HOT 6
- Unable to modify the default directory for creating folders HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from syncthing.