Community Forum

Xfinity blocking Google Firebase Domains

Highlighted
Regular Visitor

Xfinity blocking Google Firebase Domains

Hello, a lot of our customers are unable to load our company website because https://firebasestorage.googleapis.com is being blocked by Xfinity (possibly the Advance Security product). Could someone investigate and advise?

 

—Cory

Highlighted
Expert

Re: Xfinity blocking Google Firebase Domains

Has anyone tried to disable the Advanced Security feature ?, it's been buggy;

https://www.xfinity.com/support/articles/using-xfinity-xfi-advanced-security

Your link yields this;

 

Screenshot.png



I am not a Comcast Employee.
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Highlighted
Regular Visitor

Re: Xfinity blocking Google Firebase Domains

Hi EG,

 

Unblocking the domain on my own network isn't going to fix the issue for all of our users. I'm asking for this domain to be unblocked across the Xfinity Security product so that my company's user's can access and use our web application that is hosted on Google Firebase.

 

https://firebasestorage.googleapis.com

 

 

Highlighted
Regular Visitor

Re: Xfinity blocking Google Firebase Domains

Additinoally, https://firebasestorage.googleapis.com isn't a website, it's a Google Firebase API endpoint. I forgot to include "https://" in my original example which has now been fixed, but the response, without including proper authentication headers and other bits, will be something like 

 

{
  "error": {
    "code": 400,
    "message": "Invalid HTTP method/URL pair."
  }
}

 

Highlighted
Expert

Re: Xfinity blocking Google Firebase Domains

O/k well I wasn't talling about just yours... If they are all using the Comcast supplied gateway devices, then they all have the Advanced Security software / firmware loaded into them. Perhaps traceroutes to it will reveal / confirm where the blocking is occuring ?


I am not a Comcast Employee.
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Highlighted
New Poster

Re: Xfinity blocking Google Firebase Domains

It's a problem with Comcast Advanced Security. It is flagging firebase storage API as a threat. You can only fix it for yourself until Comcast finally fixes the issue. It's affecting thousands of users across a great deal of applications.

You can find the GitHub issue for firebase as well to follow their progress in trying to get Comcast to fix the issue.

https://github.com/firebase/firebase-ios-sdk/issues/4913
Highlighted
New Poster

Re: Xfinity blocking Google Firebase Domains

To be clear, turning off advanced Security fixes the issue entirely. That is obviously not an acceptable solution as we can't tell our users to do that and it's not scalable. The firebase APIs should not be marked as a threat.
Highlighted
Expert

Re: Xfinity blocking Google Firebase Domains


@absenT1 wrote:
It's a problem with Comcast Advanced Security.

I thought I said that ?



I am not a Comcast Employee.
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!
Highlighted
Regular Visitor

Re: Xfinity blocking Google Firebase Domains

EG, If we want to be pendantic, I pointed out in my original post that this was likely Advanced Security, but we don't really know for sure. What a mess. It would be immensley helpful to have a Comcast employee chime in on this issue. How do we make that happen?

Highlighted
Expert

Re: Xfinity blocking Google Firebase Domains

"Pedantic" 'eh. For realz ? O/k have ball. I'm out. Best of luck with it ! 🙂


I am not a Comcast Employee.
I am a Customer Expert volunteering my time to help other customers here in the Forums.
We ask that you post publicly so people with similar questions may benefit from the conversation.
Was your question answered? Mark the post as Best Answer!