This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Protection blocking googleapi

I am using a site called codeskulptor (http://www.codeskulptor.org) and am having a problem with the save function.  Codeskulptor uses Google API, and I tried adding every referenced site into the Allowed website list, but nothing seems to help.  Attempting to save should generate a URL for my saved project, but it doesn't.  Turning off both switches in Web Protect resolves this issue.

I believe the Web Protect feature is important, and would like to keep it turned on if possible.  Is there something I can do to resolve this issue?

Sophos Antivirus HE v9.2.4

OS X 10.10.3

Safari 8.0.6, Chrome 35.0.1916.153, Firefox 38.0.1

iMac (Mid-2010) 3.2GHz i3, 16GB RAM, 4TB HDD

:1020946


This thread was automatically locked due to age.
  • Hi BpBecker,

    I've been doing a bit of testing and haven't been able to recreate the issue you mentioned. I didn't make any changes to the code, but I did try hitting the save button, which generated a URL like this for me:

    http://www.codeskulptor.org/#user40_J02xAyYTQX_0.py

    The new URL just showed up in the Address bar at the top. I just want to make sure that is the step that fails when you have web protection enabled.

    The first thing that comes to mind is maybe the application is making calls to additional URLs that you haven't added to the allow list. I ran a quick packet capture and the only one I saw was: 

    codeskulptor-user40.commondatastorage.googleapis.com

     

    So I guess one thing you can do is make sure you add googleapis.com to the allowed list. Althoguh I still find it puzzling that this fails for you but not for me. Hmmm.

    Have you tried checking the logs at all? 

    :1020979
  • That's exactly how it's supposed to work.  It's very odd.  I added the website, but that doesn't seem to affect anything.  If I start with the default address, then I have to turn off both Web Protection options to get the new URL.  However, once I have the new URL I can turn web protection options back on and use the generated URL fopr future work.

    Thanks for looking at this.  I'll forward this workaround to the rest of our group who are experiencing this issue.  

    :1020980
  • Sound good, glad you found a workaround! 

    :1021005