coryk's profile

Regular Visitor

 • 

4 Messages

Wednesday, February 26th, 2020 3:00 PM

Closed

Xfinity blocking Google Firebase Domains

Hello, a lot of our customers are unable to load our company website because https://firebasestorage.googleapis.com is being blocked by Xfinity (possibly the Advance Security product). Could someone investigate and advise?

 

—Cory

This conversation is no longer open for comments or replies and is no longer visible to community members.

Expert

 • 

103.5K Messages

4 years ago

Has anyone tried to disable the Advanced Security feature ?, it's been buggy;

https://www.xfinity.com/support/articles/using-xfinity-xfi-advanced-security

Your link yields this;

 

Screenshot.png

Regular Visitor

 • 

4 Messages

4 years ago

Hi EG,

 

Unblocking the domain on my own network isn't going to fix the issue for all of our users. I'm asking for this domain to be unblocked across the Xfinity Security product so that my company's user's can access and use our web application that is hosted on Google Firebase.

 

https://firebasestorage.googleapis.com

 

 

Regular Visitor

 • 

4 Messages

4 years ago

Additinoally, https://firebasestorage.googleapis.com isn't a website, it's a Google Firebase API endpoint. I forgot to include "https://" in my original example which has now been fixed, but the response, without including proper authentication headers and other bits, will be something like 

 

{
  "error": {
    "code": 400,
    "message": "Invalid HTTP method/URL pair."
  }
}

 

Expert

 • 

103.5K Messages

4 years ago

O/k well I wasn't talling about just yours... If they are all using the Comcast supplied gateway devices, then they all have the Advanced Security software / firmware loaded into them. Perhaps traceroutes to it will reveal / confirm where the blocking is occuring ?

New Poster

 • 

2 Messages

4 years ago

To be clear, turning off advanced Security fixes the issue entirely. That is obviously not an acceptable solution as we can't tell our users to do that and it's not scalable. The firebase APIs should not be marked as a threat.

New Poster

 • 

2 Messages

4 years ago

It's a problem with Comcast Advanced Security. It is flagging firebase storage API as a threat. You can only fix it for yourself until Comcast finally fixes the issue. It's affecting thousands of users across a great deal of applications.

You can find the GitHub issue for firebase as well to follow their progress in trying to get Comcast to fix the issue.

https://github.com/firebase/firebase-ios-sdk/issues/4913

Expert

 • 

103.5K Messages

4 years ago


@absenT1 wrote:
It's a problem with Comcast Advanced Security.

I thought I said that ?

Regular Visitor

 • 

4 Messages

4 years ago

EG, If we want to be pendantic, I pointed out in my original post that this was likely Advanced Security, but we don't really know for sure. What a mess. It would be immensley helpful to have a Comcast employee chime in on this issue. How do we make that happen?

Expert

 • 

103.5K Messages

4 years ago

"Pedantic" 'eh. For realz ? O/k have ball. I'm out. Best of luck with it ! 🙂
forum icon

New to the Community?

Start Here