coryk's profile

Regular Visitor

 • 

4 Messages

Wed, Feb 26, 2020 3:00 PM

Xfinity blocking Google Firebase Domains

Hello, a lot of our customers are unable to load our company website because https://firebasestorage.googleapis.com is being blocked by Xfinity (possibly the Advance Security product). Could someone investigate and advise?

 

—Cory

Responses

EG

Expert

 • 

88.1K Messages

1 y ago

Has anyone tried to disable the Advanced Security feature ?, it's been buggy;

https://www.xfinity.com/support/articles/using-xfinity-xfi-advanced-security

Your link yields this;

 

Screenshot.png

Regular Visitor

 • 

4 Messages

1 y ago

Hi EG,

 

Unblocking the domain on my own network isn't going to fix the issue for all of our users. I'm asking for this domain to be unblocked across the Xfinity Security product so that my company's user's can access and use our web application that is hosted on Google Firebase.

 

https://firebasestorage.googleapis.com

 

 

Regular Visitor

 • 

4 Messages

1 y ago

Additinoally, https://firebasestorage.googleapis.com isn't a website, it's a Google Firebase API endpoint. I forgot to include "https://" in my original example which has now been fixed, but the response, without including proper authentication headers and other bits, will be something like 

 

{
  "error": {
    "code": 400,
    "message": "Invalid HTTP method/URL pair."
  }
}

 

EG

Expert

 • 

88.1K Messages

1 y ago

O/k well I wasn't talling about just yours... If they are all using the Comcast supplied gateway devices, then they all have the Advanced Security software / firmware loaded into them. Perhaps traceroutes to it will reveal / confirm where the blocking is occuring ?

New Poster

 • 

2 Messages

1 y ago

To be clear, turning off advanced Security fixes the issue entirely. That is obviously not an acceptable solution as we can't tell our users to do that and it's not scalable. The firebase APIs should not be marked as a threat.

New Poster

 • 

2 Messages

1 y ago

It's a problem with Comcast Advanced Security. It is flagging firebase storage API as a threat. You can only fix it for yourself until Comcast finally fixes the issue. It's affecting thousands of users across a great deal of applications.

You can find the GitHub issue for firebase as well to follow their progress in trying to get Comcast to fix the issue.

https://github.com/firebase/firebase-ios-sdk/issues/4913
EG

Expert

 • 

88.1K Messages

1 y ago


@absenT1 wrote:
It's a problem with Comcast Advanced Security.

I thought I said that ?

Regular Visitor

 • 

4 Messages

1 y ago

EG, If we want to be pendantic, I pointed out in my original post that this was likely Advanced Security, but we don't really know for sure. What a mess. It would be immensley helpful to have a Comcast employee chime in on this issue. How do we make that happen?

EG

Expert

 • 

88.1K Messages

1 y ago

"Pedantic" 'eh. For realz ? O/k have ball. I'm out. Best of luck with it ! 🙂

New to the Community?

Start Here