DOnation form loading slow with security errors

[Summit]

The form here https://www.panfoundation.org/index.php/en/donate loads VERY slowly if at all and in the console we see the following errors.

[COLOR=#FF0000]Failed to load resource: net::ERR_CONNECTION_TIMED_OUT[/COLOR]
ping:1 Can't Load URL: The domain of this URL isn't included in the app's domains. To be able to load this URL, add all domains and subdomains of your app to the App Domains field in your app settings.
chrome-extension://agoebdicoenidlkgnfhcjblfkjmplnha/src/inject/inject.js:17 
chrome-extension://agoebdicoenidlkgnfhcjblfkjmplnha/src/inject/inject.js:37 https://www.panfoundation.org/index.php/en/donate
form-field-detection.js:37

[COLOR=#FF0000]Uncaught SecurityError: Failed to read the 'contentDocument' property from 'HTMLIFrameElement[/COLOR]': Blocked a frame with origin "https://www.panfoundation.org" from accessing a frame with origin "https://connect.clickandpledge.com". Protocols, domains, and ports must match.

[CnP.Support]

Good day Summit

Please see: https://connect.clickandpledge.com/w...oundation30876

Can this load on your browser?

This is the form you are loading as iframe in your site. Do you see the errors when visiting the above URL?

[Summit]

Yes, they are there as well.

[Summit]

[CnP.Support]

Good day!

Strange.. where do you see this error in our page?

The errors you are reporting reference panfoundation.

Can you show me a screen shot of where you see these errors?

Clicking on this link: https://connect.clickandpledge.com/w...oundation30876

Please also note that you are linking to the donation form in the Publish & Post. This is not allowed as it is a directed page with session values. The correct URL is to the main page of the publish & post. So please do not use the single page of donation in your iframe as that is not allowed.

[CnP.Support]

Good day!

The images you have posted are PNG and the forum shows them as thumbnail - impossible to read.

Please post them as JPG files so we can review.

[Summit]

fixed the post, JPG added above

[Summit]

The error definitely exists on the C&P page separate from our site. I was not aware that we could not link directly to the donation page. But that still would not resolve the issue.

[Summit]

still getting same error

[CnP.Support]

Good day!

I moved this post to the "Connect Peer-to-Peer" Channel as it is not related to the API platform.

We reviewed your case & here is our finding. Please see our page as it stands on a clean browser - & by clean I mean without any installed extensions:



The error seen on this page:



The error related to https://checkout.ga.kount.net is by design and part of the security feature of the page. The gif file is not supposed to be found and it is part of an internal tracking system.

There are no other errors on this page with a CLEAN browser.

Now let us review the page with the extension that you appear to be having with your browser.



The errors seen are related to an extension called "My Password App" - our research shows it is the following app: https://chrome.google.com/webstore/d...kjmplnha?hl=en

This app is trying to access the iframe page and it cannot which is understandable. The errors are related to its inability to access the iframe.

"Failed to load resource: net::ERR_CONNECTION_TIMED_OUT ping:1 Can't Load URL: The domain of this URL isn't included in the app's domains. To be able to load this URL, add all domains and subdomains of your app to the App Domains field in your app settings. chrome-extension://agoebdicoenidlkgnfhcjblfkjmplnha/src/inject/inject.js:17 chrome-extension://agoebdicoenidlkgnfhcjblfkjmplnha/src/inject/inject.js:37https://www.panfoundation.org/index.php/en/donate form-field-detection.js:37 Uncaught SecurityError: Failed to read the 'contentDocument' property from 'HTMLIFrameElement': Blocked a frame with origin "htt"

We duplicated the issue once we installed the app and tested it in a VM: Searching for: agoebdicoenidlkgnfhcjblfkjmplnha

https://www.google.com/?ion=1&espv=2...hcjblfkjmplnha

The icon in the image you also provided shows the "P" icon which is the "My Password" extension. It seems like a lot of people have problem with that extension as the search indicates.

I hope this provides a bit of insight into the issue being reported.

Please let us know if we can be of more help.

[Summit]

what about this issue

[CnP.Support]

Good day!

What issue? are you referring to https://checkout.ga.kount.net/static-kaptcha.gif not loading? timing out?

I do not see any issues other than the one we discussed above. The kount.net image is part of the security and is supposed to behave as it does. It is by design.

[Summit]

ok so if this is the intended behavior, why does it take so long to load?

[CnP.Support]

Good day!

Kount is a major fraud monitoring site used by banks. Please note that I cannot list any details of what we do here.

Please see:



It takes no time to load this. The size is 0

this is a 1x1 pixel on every Click & Pledge site.

The load time for the page is 3.84 seconds from Dallas, TX and we tested it from several other locations.

Hope that answers your question.

[Summit]

no it does not answer anything. this page https://www.panfoundation.org/index.php/en/donate takes a long time to load. we need to know why. thats all we are asking. the rest of the site loads just fine, ONLY the click and pledge form loads slowly.