Skip to content
This repository has been archived by the owner on Nov 6, 2023. It is now read-only.

Must disable Cnzz.com or Bilibili.com's video will get error #2048 #5602

Closed
escape0707 opened this issue Jul 3, 2016 · 10 comments
Closed

Must disable Cnzz.com or Bilibili.com's video will get error #2048 #5602

escape0707 opened this issue Jul 3, 2016 · 10 comments

Comments

@escape0707
Copy link

No description provided.

@jeremyn
Copy link
Contributor

jeremyn commented Aug 30, 2016

Here's an example link: http://www.bilibili.com/video/av6050274/ . On Windows 10, if I visit the URL in Chrome, the video won't play and instead I see a white screen that says Loading (100%).... If I disable the Adobe.com rule, the video will work. If I visit the URL in Firefox, the video plays right away, and the Adobe.com doesn't even appear under Enable / Disable Rules. The Cnzz.com ruleset doesn't seem related.

@hwk603
Copy link

hwk603 commented Sep 4, 2016

Same here , On Windows 10 , https 2016.9.1
images 2016-09-04 1472996969

@Artoria2e5
Copy link
Contributor

Artoria2e5 commented Sep 14, 2016

http://tajs.qq.com/stats?sId=9156259&_=1473883615714
Failed to load resource: net::ERR_BLOCKED_BY_CLIENT

stat.php?id=2724999&web_id=2724999&_=1473883615711:16
Failed to execute 'write' on 'Document': It isn't possible to write into a document from an asynchronously-loaded external script unless it is explicitly opened.

https://hzs11.cnzz.com/stat.htm?id=2724999&r=&lg=en-us&ntime=1473602138&cnz…4%E5%93%A9%E5%BC%B9%E5%B9%95%E8%A7%86%E9%A2%91%E7%BD%91&h=1&rnd=1196376936
Failed to load resource: net::ERR_TIMED_OUT

VM44 extensions::uncaught_exception_handler:8 Error in event handler for (unknown): TypeError: Cannot read property 'url' of undefined
    at chrome-extension://kpbnombpnpcffllnianjibmpadjolanh/bilibili_injected.min.js:2:4148

However, hzs11.cnzz.com is not in the rule.

After looking into the source for this page, I found some boring write-to-html style eval:

    $('<scr'+'ipt type="text/javascript" src="http://s11.cnzz.com/stat.php?id=2724999&web_id=2724999" charset="UTF-8"></scri'+'pt>').appendTo('body');  

The link shows a obfuscated JS on visit (which -- well -- takes you to that hzs11 site eventually). JSNice does not seem to help. Naive eval-substitution on other pages seems to do no good (takes me back to c.cnzz.com script, cookie check?), so I guess I will need to do that on the page itself...

And in fact, visiting the script through HTTPS and HTTP produces different scripts. The string literal "http://" near the end of the file changes to "https://" in HTTPS. Sounds like a redirection implemented improperly.

  • This behavior happens in many other CNZZ domains with the request /stat.php?id=2724999&web_id=2724999:
    • other s[num] domains
    • c.
    • w.

And yes, I have to say that it is rare to see a site that doesn't function without tracking scripts loaded...

@Artoria2e5
Copy link
Contributor

Artoria2e5 commented Sep 14, 2016

And yes, my personal suggestion is to ditch all of the s\d+\.cnzz\.com domains. I guess being able to work with HTTPS is some kind of undocumented function for cnzz.

PS: This issue occasionally fail to reproduce. Nobody knows...

Artoria2e5 added a commit to Artoria2e5/https-everywhere that referenced this issue Sep 14, 2016
These sites generate scripts that refer to other CNZZ hosts with nonfunctional HTTPS when visited through HTTPS.
@gloomy-ghost
Copy link
Collaborator

gloomy-ghost commented Sep 18, 2016

I tried to open the link in incognito mode, which allows me to disable all extensions except https-everywhere. The video successfully loaded:

image

Furthermore, CNZZ has official support of https. Look here: http://help.cnzz.com/support/kuaisuanzhuangdaima/changjianwenti/2013/0902/25.html


Found the Failed to execute 'write' on 'Document' error you said, it could occur without any extensions. So I think it is a problem that CNZZ has to worry about.

@Artoria2e5
Copy link
Contributor

I know that one occurs anyway. But the s11 server being too clever is… meh.

@gloomy-ghost
Copy link
Collaborator

gloomy-ghost commented Sep 20, 2016

The timeout of hzs11.cnzz.com does not really break bilibili. Visitors won't care about the site and third-party trackers are unable to track them :)

I sent an email to both cnzz and bilibili. Hope they will look it up...

BTW, bilibili is not only using cnzz (It also has own trackers). They should do something if the data deviation of cnzz is unacceptable and they care about it.

@gloomy-ghost
Copy link
Collaborator

hdslb.com is breaking live videos (e.g. http://live.bilibili.com/204600) now... Found nothing about hdslb.com on console when the ruleset is enabled though.

@gloomy-ghost
Copy link
Collaborator

#7976 fixes live videos, can anyone on this thread who experienced video issues have a look at the PR if it fixes the main site as well?

@gloomy-ghost
Copy link
Collaborator

I believe this has been fixed, but please feel free to reopen if anyone is able to reproduce it.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

6 participants