New Security Settings in Chrome & Firefox Causing Download Issue in LV catalog - Workarounds

Report & help check download problems, corrupted files, badly-named files, bad links etc. (NOT for style & reading complaints)
knotyouraveragejo
LibriVox Admin Team
Posts: 22078
Joined: November 18th, 2006, 4:37 pm

Post by knotyouraveragejo »

Direct downloads by clicking on the Download buttons on our catalog pages are currently not working in the latest version of Chrome. You can still right click and 'save as' to download, but you will get an error that says ...zip can't be downloaded securely and you have to choose discard or click on the up arrow and choose keep.

Chrome flags these for the following reason. Insecure: You tried to download a file or program that wasn't secure but was started on a secure page. In some cases, you can choose to download anyway.

Since our workflow software enters the archive download links in the database http and not https, this is results in what is known as 'mixed content'. It does not mean the links are insecure. The actual archive.org links to the downloads are https links.

Fixes/Workarounds:

1. Try a different browser - The downloads still work normally in Edge, Firefox, etc. This is some new security thing in Chrome (version 87.0.4280.88).
2. Download directly from the archive.org page for the project
3. Enable mixed content in Google Chrome for librivox.org which will reenable normal downloads from all the catalog pages
  • a. Click the lock or caution icon, then click Site settings.
    b. Scroll to Insecure content, then use the drop-down list to change “Block (default)” to “Allow.”
    c. Reload the page.
dekymo
Posts: 7
Joined: December 28th, 2020, 3:59 am

Post by dekymo »

The correct way to fix this would be to fix the website so that all archive.org links use https://

However in the mean time the following javascript bookmark ("bookmarklet") might also come in useful;
it rewrites all the http urls on a page to https:

Code: Select all

javascript:for(var a=document.links,b=0;b<a.length;b++)"http:"==a[b].protocol&&(a[b].protocol="https:");
To use, create a new bookmark in the browser, and paste in the "javascript:..." text as the URL.

Then navigate to an audiobook page and click on the bookmark. There will be no visual feedback but all http links should be replaced by https links.

Then hopefully the downloads should work. You will need to click the bookmarklet each time you navigate to an audiobook page.

I haven't actually tested it in Chrome, I hope it works.
knotyouraveragejo
LibriVox Admin Team
Posts: 22078
Joined: November 18th, 2006, 4:37 pm

Post by knotyouraveragejo »

dekymo wrote: December 30th, 2020, 10:39 am The correct way to fix this would be to fix the website so that all archive.org links use https://
Yes, of course. However at present we do not have a way to automate this change. As I'm sure you appreciate, fixing all 14,812 cataloged projects by hand is not practical, hence the suggested workaround.
dekymo wrote: December 30th, 2020, 10:39 amHowever in the mean time the following javascript bookmark ("bookmarklet") might also come in useful;
it rewrites all the http urls on a page to https:

Code: Select all

javascript:for(var a=document.links,b=0;b<a.length;b++)"http:"==a[b].protocol&&(a[b].protocol="https:");
To use, create a new bookmark in the browser, and paste in the "javascript:..." text as the URL.

Then navigate to an audiobook page and click on the bookmark. There will be no visual feedback but all http links should be replaced by https links.

Then hopefully the downloads should work. You will need to click the bookmarklet each time you navigate to an audiobook page.

I haven't actually tested it in Chrome, I hope it works.
Thanks for suggesting this alternate option for any users who would prefer this solution. I gave it a try, and it does work in Chrome.
Jo
jnthn
Posts: 2
Joined: February 23rd, 2021, 5:06 pm

Post by jnthn »

I have another workaround: Right-click the download button and copy the link address. Paste this in the URL window and press enter. This begins the download, for me at least. I hope this isn't redundant.
knotyouraveragejo
LibriVox Admin Team
Posts: 22078
Joined: November 18th, 2006, 4:37 pm

Post by knotyouraveragejo »

Yes, mentioned elsewhere, but it never hurts to have things in multiple places. :) You can also just right click and choose open in new tab or window.
Jo
HandmadePSK
Posts: 1942
Joined: December 5th, 2020, 5:53 pm
Location: Ukraine
Contact:

Post by HandmadePSK »

knotyouraveragejo wrote: February 24th, 2021, 9:06 am Yes, mentioned elsewhere, but it never hurts to have things in multiple places. :) You can also just right click and choose open in new tab or window.
It doesn`t work. At least, for me.
Alexander ❤ HandmadePSK ❤ About me ◀◀◀ (readable)
🦋 Aspire to inspire before we expire! 🦄
HandmadePSK
Posts: 1942
Joined: December 5th, 2020, 5:53 pm
Location: Ukraine
Contact:

Post by HandmadePSK »

jnthn wrote: February 23rd, 2021, 10:14 pm I have another workaround: Right-click the download button and copy the link address. Paste this in the URL window and press enter. This begins the download, for me at least. I hope this isn't redundant.
Oh, this is a useful one and works well. 👍
Alexander ❤ HandmadePSK ❤ About me ◀◀◀ (readable)
🦋 Aspire to inspire before we expire! 🦄
TriciaG
LibriVox Admin Team
Posts: 60578
Joined: June 15th, 2008, 10:30 pm
Location: Toronto, ON (but Minnesotan to age 32)

Post by TriciaG »

This should be resolved now. Un-stickying the thread.
Serial novel: The Wandering Jew
Medieval England meets Civil War Americans: Centuries Apart
Humor: My Lady Nicotine
knotyouraveragejo
LibriVox Admin Team
Posts: 22078
Joined: November 18th, 2006, 4:37 pm

Post by knotyouraveragejo »

That's fine, but I had left it for cases where the older text links were still http. I'll just bookmark it so I can find it if needed...
Jo
TriciaG
LibriVox Admin Team
Posts: 60578
Joined: June 15th, 2008, 10:30 pm
Location: Toronto, ON (but Minnesotan to age 32)

Post by TriciaG »

Artom changed everything to https, including text links. So the only errors that may come up are for sites that don't have security certificates (that aren't meant to be https).
Serial novel: The Wandering Jew
Medieval England meets Civil War Americans: Centuries Apart
Humor: My Lady Nicotine
knotyouraveragejo
LibriVox Admin Team
Posts: 22078
Joined: November 18th, 2006, 4:37 pm

Post by knotyouraveragejo »

I know they were all changed, but I guess I was thinking some might need to be changed back in order to work. If that's not the case, all the better...
Jo
InTheDesert
Posts: 7447
Joined: August 20th, 2019, 8:25 pm

Post by InTheDesert »

Hooray!
American Trials Vol. 3 95% 5 left!
Female Scripture Characters by William Jay (1769 - 1853) 93% 2 left!
Devotional Commentary: Apocalypse 85%
Emotions
PL pls: DPL DPL DPL 43 27-28
TriciaG
LibriVox Admin Team
Posts: 60578
Joined: June 15th, 2008, 10:30 pm
Location: Toronto, ON (but Minnesotan to age 32)

Post by TriciaG »

Oops - re-pinning this. The audio file links themselves (not in a zip) haven't been https-ized in old projects, and (if it matters) the link to the Archive project page is still generating as http upon cataloging.
Serial novel: The Wandering Jew
Medieval England meets Civil War Americans: Centuries Apart
Humor: My Lady Nicotine
InTheDesert
Posts: 7447
Joined: August 20th, 2019, 8:25 pm

Post by InTheDesert »

TriciaG wrote: November 7th, 2021, 2:57 pm Oops - re-pinning this. The audio file links themselves (not in a zip) haven't been https-ized in old projects, and (if it matters) the link to the Archive project page is still generating as http upon cataloging.
I think in most ways this is less crucial because the browsers are only concerned about zip files on insecure connections rather than mp3s or the IA pages. I don't think anything is blocked.
American Trials Vol. 3 95% 5 left!
Female Scripture Characters by William Jay (1769 - 1853) 93% 2 left!
Devotional Commentary: Apocalypse 85%
Emotions
PL pls: DPL DPL DPL 43 27-28
mingersoll
Posts: 6
Joined: January 11th, 2022, 2:44 pm

Post by mingersoll »

I have read through the suggestions for enabling my computer to access files at LibriVox.org.
However, I am not a "genius" computer user, and most of these suggestions are like Greek to me.
I have no idea how to implement them. And, I bet I am not the only one.
Are there any plans for LibriVox.org to fix their links so that they are accessible with the new updates in Chrome?
I have tried Edge and Firefox and cannot gain access in those browsers either.
Thank you.
Post Reply