Issue 345160 in chromium: Web requests of updated Flash won't go through if getting redirected (not cross domain)

[c***@googlecode.com]

Comment #2 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

I made a tiny Chrome extension to reproduce this issue (see the attached
the zip file).

Steps to reproduce the issue with PPAPI Flash v12.0.0.70:
1. Install the attached Chrome extension
2. Visit the Flash video site
http://static.youku.com/v1.0.0401/v/swf/loader.swf?VideoIDS=XNDA1MzQyMDU2
3. Open developer tool on the web page and you will see the redirected web
requests will fail (as the attached screenshot)

This was fine on the NPAPI Flash v12.0.0.44.

Attachments:
test-ppapi-flash.zip 1006 bytes
Screen Shot 2014-02-20 at 8.12.02 PM.png 36.1 KB
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #4 on issue 345160 by ***@teamliquid.net: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

Having the same problem here, switching to the NPAPI Flash 12 causes
a "Shockwave Flash has crashed" error when a redirect is encountered.

Are there any other workarounds available? This bug completely breaks the
functionality of a redirect extension I use.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #5 on issue 345160 by ***@teamliquid.net: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

As a workaround I was able to recover an old working version of
pepflashplayer.dll dated 2014-01-23. Replacing the one in my Chrome folder
with this has fixed the issue.

Attachments:
pepflashplayer.zip 6.1 MB
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #6 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

Replacing the Flash player might not be a good and long-term solution,
since Adobe just urged users to update from v12.0.0.44 to v12.0.0.70 due to
a 0day issue:

http://forums.adobe.com/message/6140488
http://helpx.adobe.com/security/products/flash-player/apsb14-07.html
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #7 on issue 345160 by ***@teamliquid.net: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

Good point - I'm definitely not recommending it's a long term solution, and
I'm sure Chrome will auto update and overwrite it at some point. Figured
I'd put it up as an available workaround for people who rely on redirects
working and have an non-exploitable environment.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #10 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

I just changed the extension a little bit in order to make it also work on
computers set with the timezone GMT+8.
Please use the attached new version for testing.



Attachments:
test-ppapi-flash-v2.zip 3.0 KB
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #11 on issue 345160 by ***@openbet.com: Web requests of
updated Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

Just wanted to provide easier way to reproduce it.
A flash game that loads resources from redirected URL's (HTTP code response
303) is failing to load.

Chrome Version: 33.0.1750.117
Shockwave Flash: 12.0.0.70
/opt/google/chrome/PepperFlash/libpepflashplayer.so

Try to access the game with setup in here: http://goo.gl/PC7vU9

You will the game fails to load, developer console reveals redirect
requests cancellations, similar to what you can see in comment #2
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #13 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

@kalman Thanks for your help!

I made a screencast to demo this issue http://recordit.co/z8G4L5
Hope it's helpful for reproducing the issue
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #15 on issue 345160 by ***@adobe.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

Hi Yuzhu,

Those flash related issues should be fixed in the next Pepper flash update
which should be handed off to Google today.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #16 on issue 345160 by ***@chromium.org: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

Cool. Thanks Xing!
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Updates:
Status: Fixed

Comment #17 on issue 345160 by ***@chromium.org: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

(No comment was entered for this change.)
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #18 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

Hi all,

The Flash player in my Chrome has automatically upgraded to v12.0.0.77,
both PPAPI and NPAPI.
But the issue still exists.

Is the fix provided by Adobe already included in the new version v12.0.0.77?
If so, please help us take a look why it is still not working. Thanks

Attachments:
Screen Shot 2014-03-13 at 10.40.02 AM.png 115 KB
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #27 on issue 345160 by ***@gmail.com: Web requests of
updated Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

UserAgent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML,
like Gecko) Chrome/34.0.1847.116 Safari/537.36

PPAPI Flash 13.0.0.182

No issue with crossdomain.xml(allowed for all site)

When I use chrome.webRequest to redirect the request which launched by
flash,I would get "pending" for a very long time and eventually stuck
in "pending",and flash in the web has not load any films. I think it is
very similar to this issues.

But when use old PPAPI Flash(v12.0.0.44), it can work well with
chrome.webRequest redirection.

Attachments:
pending.jpg 223 KB
pending2.JPG 119 KB
pending3.JPG 246 KB
crossdomain1.JPG 54.2 KB
crossdomain2.JPG 66.9 KB
version.JPG 94.2 KB
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #31 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

Still broken in Chrome/37.0.2042.0 with pepflashplayer/14.0.0.125
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #32 on issue 345160 by ***@teamliquid.net: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

Adobe have posted a comment that claims the problem is with Chrome, not
Flash Player.

https://bugbase.adobe.com/index.cfm?event=bug&id=3711074

This doesn't appear to be correct given that downgrading Flash Player
resolves the problem. Can someone at Google follow up with Adobe about this?
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #33 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

I insist that this is a bug in Flash,because downgrading Flash Player to
PPAPI 12.0.0.44 resolved the issue.
If the problem is with Chrome,downgrading would make no difference.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #34 on issue 345160 by ***@adobe.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

@realzoc
Thanks for your investigation, I think you are correct, some change in
flash did introduce this issue. However we may still need Google's help to
address this problem, and here is the detailed info:

1. Flash had to deal with a security issue related to 307 redirect, so we
requested Chrome (via PPAPI) to pass us the redirect request. This is the
change that caused the problem.

2. For the extension test, flash does not actually get any redirect, Chrome
handles it, that's why we claimed before that this is not flash's problem.

3. We believe that Chrome may be confused by flash's redirect handling and
extension's redirect handling, so the redirect request is finally cancelled
by it.

Based on the above situation, I think we need Google's insight in this
problem, we are happy to help if there is any better way for flash to
handle redirects.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #35 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

Now I'm finally clear,Thanks.And now I understand that why you claim that
this is not flash's problem.
As you said,we need Google's insight in this problem.
I think more discussion between Adobe and Google is needed to solve this
problem.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #38 on issue 345160 by ***@teamliquid.net: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

I tried to produce a log with the net-internals, however even with no other
tabs open it recorded a large amount of unrelated information including
recent URLs I'd visited through the disk cache and some private URLs with
oauth tokens from extensions and such. I did extract what I believe is the
relevant entry where the request is failing though.

Background: To fix lag issues, I have a Chrome extension that redirects
certain URLs through a local proxy which provides better connectivity. To
do this, it intercepts requests for .m3u8 and .ts files and issues a
redirectUrl in the onBeforeRequest handler.

Here, the index-live.m3u8 is requested by the flash player and should be
redirected. Instead it hangs and times out.

10368: HOST_RESOLVER_IMPL_REQUEST
video55.ams01.hls.twitch.tv:80
Start Time: 2014-07-24 22:15:05.878

t=213167 [st= 0] +HOST_RESOLVER_IMPL_REQUEST [dt=17]
--> address_family = 0
--> allow_cached_response = true
--> host = "video55.ams01.hls.twitch.tv:80"
--> is_speculative = false
--> source_dependency = 10367 (CONNECT_JOB)
t=213167 [st= 0] HOST_RESOLVER_IMPL_CREATE_JOB
t=213167 [st= 0] HOST_RESOLVER_IMPL_JOB_ATTACH
--> source_dependency = 10371 (HOST_RESOLVER_IMPL_JOB)
t=213184 [st=17] -HOST_RESOLVER_IMPL_REQUEST

10373: URL_REQUEST
Start Time: 2014-07-24 22:15:05.920

t=213209 [st= 0] +REQUEST_ALIVE [dt=14953]
t=213210 [st= 1] +URL_REQUEST_DELEGATE [dt=3]
t=213210 [st= 1] DELEGATE_INFO [dt=1]
--> delegate_info = "extension Twitch.tv Europe
Lag Fix (private)"
t=213211 [st= 2] DELEGATE_INFO [dt=2]
--> delegate_info = "extension Twitch.tv Europe
Lag Fix (private)"
t=213213 [st= 4] CHROME_EXTENSION_REDIRECTED_REQUEST
--> extension_id
= "lkoflkbooljnkgkpbojefneeiodflpdm"
t=213213 [st= 4] -URL_REQUEST_DELEGATE
t=213213 [st= 4] +URL_REQUEST_START_JOB [dt=14949]
--> load_flags = 131456 (ENABLE_LOAD_TIMING |
ENABLE_UPLOAD_PROGRESS | VERIFY_EV_CERT)
--> method = "GET"
--> priority = "LOW"
--> url
= "http://video55.ams01.hls.twitch.tv/hls48/superiorwolf_10383290880_122168513/chunked/index-live.m3u8?token=id=1868699749997233308,bid=10383290880,exp=1406319302,node=video55-1.ams01.hls.justin.tv,nname=video55.ams01,fmt=chunked&sig=6c348af072e862bb9323b961be32acf7f0d09f54"
t=213213 [st= 4] URL_REQUEST_REDIRECT_JOB
--> reason = "Delegate"
t=213213 [st= 4] +URL_REQUEST_DELEGATE [dt=14949]
t=213213 [st= 4] DELEGATE_INFO [dt=14949]
--> delegate_info = "AsyncResourceHandler"
t=228162 [st=14953] -URL_REQUEST_DELEGATE
t=228162 [st=14953] CANCELLED
t=228162 [st=14953] -URL_REQUEST_START_JOB
--> net_error = -3 (ERR_ABORTED)
t=228162 [st=14953] URL_REQUEST_DELEGATE [dt=0]
t=228162 [st=14953] -REQUEST_ALIVE
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #39 on issue 345160 by ***@teamliquid.net: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

Attached is a log of the same request with the older version of
pepflashplayer.

Attachments:
oldflash.txt 5.4 KB
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #51 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

THX,I am waiting for this moment. Downloading.. :D


2014-08-07 22:43 GMT+08:00 <***@googlecode.com>:
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #52 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

Thanks all of you,thank for your efficient and fruitful work,I believe this
bug has fixed in Canary 38.0.2116.0 with pepperflash 14.
My extension can work well with my local reverse proxy now.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #53 on issue 345160 by ***@chromium.org: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
http://code.google.com/p/chromium/issues/detail?id=345160

Thanks for the followup, and for bringing this to our attention!
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #54 on issue 345160 by ***@gmail.com: Web requests of
updated Flash won't go through if getting redirected (not cross domain)
https://code.google.com/p/chromium/issues/detail?id=345160

Attached extension redirects all Loading Image...
requests to internal extension resource (Example.jpg).

Redirecting works as expected, for instance
Loading Image...
is successfully redirected to
chrome-extension://{extension_uuid}/Example.jpg
(see
http://www.adobe.com/content/dam/Adobe/en/devnet/flash/samples/media_2/images/image1.jpg)

However, redirecting doesn't seem to work IFF 1. request is made by flash
plugin AND 2. redirectUrl is obtained from chrome.extension.getURL().
So, I can redirect flash requests to
Loading Image..., but I can't
redirect them to chrome-extension://{extension_uuid}/Example.jpg

Sample app for:
http://www.adobe.com/devnet/actionscript/samples/media_2.html

Sample images:
http://www.adobe.com/content/dam/Adobe/en/devnet/flash/samples/media_2/images/image1.jpg
Loading Image...
Loading Image...
Loading Image...
Loading Image...


Attachments:
test.zip 26.8 KB
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #55 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
https://code.google.com/p/chromium/issues/detail?id=345160

Yes.It will fail,when extensions try to redirect requests made by flash to
a local address(chrome-extension://{extension_uuid}/xxx.XXX).
And this issue have already existed for a long time.
I think it is because flash may not recognize URL
like:chrome-extension://{extension_uuid}/xxx.XXX .
So I always use online address(http://xxx).
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #56 on issue 345160 by ***@gmail.com: Web requests of
updated Flash won't go through if getting redirected (not cross domain)
https://code.google.com/p/chromium/issues/detail?id=345160

Is really flash responsible for recognizing URLs? Isn't that some internal
network engine? If extensions can redirect request (and as we know, they
can), then requests have to be somewhat "indirect". Accessing chrome://*
resources doesn't seem impossible at all.

You said that the issue is known for a long time... is it going to be fixed
or is it necessary that local request made by flash are unrecognized?
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #57 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
https://code.google.com/p/chromium/issues/detail?id=345160

URL (Uniform Resource Locators) SEE: RFC1738 or RFC3986
scheme://host.domain:port/path/filename
And scheme "chrome-extension" is not a standard scheme, flash may not
recognize it.
Only the browser (chrome/chromium) itself can locate this kind of URL.
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #58 on issue 345160 by ***@gmail.com: Web requests of
updated Flash won't go through if getting redirected (not cross domain)
https://code.google.com/p/chromium/issues/detail?id=345160

Isn't flash making it's requests through browser, "indirectly"?
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #59 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
https://code.google.com/p/chromium/issues/detail?id=345160

indirectly i think

2014-12-29 13:52 GMT+08:00 <***@googlecode.com>:
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #60 on issue 345160 by ***@gmail.com: Web requests of
updated Flash won't go through if getting redirected (not cross domain)
https://code.google.com/p/chromium/issues/detail?id=345160

So "chrome-extension" seems to be perfectly valid scheme in that case (I
know, that it's virtual, but within chrome/chromium it is legal and
recognized). I can make ajax requests to access extension resources - why
can't them be made by flash plugin (using PPAPI perhaps)?
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #61 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
https://code.google.com/p/chromium/issues/detail?id=345160

I presume flash plugin would get the redirected url and then create a new
one.
so, redirection would fail if flash thought the url was illegal.

2014-12-29 14:26 GMT+08:00, ***@googlecode.com
<***@googlecode.com>:
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #62 on issue 345160 by ***@gmail.com: Web requests of
updated Flash won't go through if getting redirected (not cross domain)
https://code.google.com/p/chromium/issues/detail?id=345160

I attached browser and flash event logs. They are very similar, excluding
few lines near the end (what does "CrossSiteResourceHandler" do?).

It's clear that in both cases (after redirect) a new request is made. I
think it should be handled in the same way (or at least successfully!)
regardless of where it came from.

Should I register a new issue or is this one going to be reopened?


Attachments:
browser.log 2.0 KB
flash.log 1.9 KB
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

[c***@googlecode.com]

Comment #63 on issue 345160 by ***@gmail.com: Web requests of updated
Flash won't go through if getting redirected (not cross domain)
https://code.google.com/p/chromium/issues/detail?id=345160

+1 , looking forward to further progress

2014-12-31 20:20 GMT+08:00, ***@googlecode.com
<***@googlecode.com>:
--
You received this message because this project is configured to send all
issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings