Level 2

Solved

Chrome CORB Blocking Response?

Forum|Forum|6 years ago
May 7, 2019
8 replies
25091 views

Device: Mac 10.12.3

Browser: Chrome 73.0.3683.103

Target: at.js 1.7.1

Target Activity: uses Conversion goal measured by Click of Element (set within Goals & Settings)

Problem: With active test on click of selected element, Chrome blocks response (CORB)

Cross-Origin Read Blocking (CORB) blocked cross-origin response https://mboxedge17.tt.omtrdc.net/m2/crocs/mbox/json?mbox=clicked-btn-x&mboxSession=b1268b31051b407eae30a0c21e17b2eb&mboxPC=021755c52653460aa69d5566e70ae705.17_74&mboxPage=29c6e9ceea1b4171b0d7cf00b17e21e2&mboxRid=3f4f3e16237040f48bd50f130ecd4cdf&mboxVersion=1.7.1&mboxCount=3&mboxTime=1557172716454&mboxHost=www.crocs.com&mboxURL=https%3A%2F%2Fwww.crocs.com%2F&mboxReferrer=&browserHeight=150&browserWidth=812&browserTimeOffset=-360&screenHeight=900&screenWidth=1440&colorDepth=24&devicePixelRatio=2&screenOrientation=landscape&webGLRenderer=Intel%20Iris%20Pro%20OpenGL%20Engine&pageType=home&loggedIn=false&mboxMCSDID=360AB35E3D82C7D8-043A9748A031B5E2&vst.trk=metrics.crocs.com&vst.trks=smetrics.crocs.com&mboxMCGVID=20996971808233652222542519822795737690&mboxAAMB=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&mboxMCGLH=7 with MIME type application/json. See https://www.chromestatus.com/feature/5629709824032768 for more details.

NOTE: I see the same issue when using getOffer/applyOffer.

Concerns:

Is Target processing click events correctly?
Is Target processing getOffer/applyOffer. correctly?
When using getOffer/applyOffer if CORB blocks the response, will the offers not be returned, preventing the experience? (Haven't had time to try)
Do other browsers cause same issue?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

Best answer by Shruti_Premkumar

joelc13866394 I did some trouble shooting and was able to confirm that engineering are aware of the CORB issue that is affecting chrome v73 and above. This issue affects both at.js 1.x click-tracking requests, as well as at.js 2.x display and click-tracking notifications.

I am checking with them on the ETA for the fix. Will post the same here once I get an update on the same.

Gaureshk_Kodag

Adobe Employee

hi Joelc,

I think there is no issue with target.

Cross-Origin Read Blocking (CORB) is a web platform security feature that helps mitigate the threat of side-channel attacks (including Spectre). It is designed to prevent the browser from delivering certain cross-origin network responses to a web page, when they might contain sensitive information and are not needed for existing web features. For example, it will block a cross-origin text/html response requested from a <script> or <img> tag, replacing it with an empty response instead. This is an important part of the protections included with Site Isolation.

This may help you to understand about it more,

https://chromium.googlesource.com/chromium/src/+/master/services/network/cross_origin_read_blocking_explainer.md#What-types-of-content-are-protected-by-CORB

Cross-Origin Read Blocking for Web Developers - The Chromium Projects

Thanks,

Gauresh Kodag.

MihneaD

Adobe Employee

joelc13866394,

That is correct this will not affect target metrics. Additionally since it's yellow that tells us it is a warning not a red error (show stopper)

If I did a good job please like, mark as helpful and mark as answer. Hope you have a wonderful day.

Mihnea Docea | Technical Support Consultant | Customer Experience | Adobe | (:: 1 (800) 497-0335

J

joelc13866394Author

Level 2

Chrome definitely blocks the response from a Measure by click (yet to test getOffer/applyOffer), whether that affects the Target test analytics I'll be testing.

Chrome, no response from the click request:

FireFox (and Safari) don't block the JSON response:

S

Shruti_Premkumar

Accepted solution

Adobe Employee

joelc13866394 I did some trouble shooting and was able to confirm that engineering are aware of the CORB issue that is affecting chrome v73 and above. This issue affects both at.js 1.x click-tracking requests, as well as at.js 2.x display and click-tracking notifications.

I am checking with them on the ETA for the fix. Will post the same here once I get an update on the same.

J

joelc13866394Author

Level 2

Chrome's CORB algorithm seems to be fickle. For some reason it doesn't block a JSON response when I use the getOffer method, which is practically the same thing as the JSON response when using the Measure by click element.

Chrome: