6 messages in com.googlegroups.google-gadgets-api[Google-Gadgets-API] Re: FeedFetcher ...
FromSent OnAttachments
robv26 May 2008 11:08 
Dan (Google Employee)26 May 2008 11:55 
robv26 May 2008 12:19 
robv26 May 2008 13:18 
abowman (Guru)28 May 2008 06:13 
robv02 Jun 2008 08:14 
Subject:[Google-Gadgets-API] Re: FeedFetcher issue
From:abowman (Guru) (abow@gmail.com)
Date:05/28/2008 06:13:57 AM
List:com.googlegroups.google-gadgets-api

I'm having issues with retrieving cached files from the same domain too. My picasa photos gadget is no longer working because of this.

Here is the security error I'm getting:

SecurityDomain 'http://374.gmodules.com/ig/ifr?url=http:// abpicasaphotosgadget.googlecode.com/svn/trunk/ picasaPhotos.xml&nocache=0&up_title=Picasa +Photos&up_userID=&up_tag=&up_rssURL=&up_slideShowDelay=5&upt_slideShowDelay=enum&up_backgroundColor=ffffff&up_pictureNum=0&upt_pictureNum=hidden&up_lastFeedURL=&upt_lastFeedURL=hidden&up_showThumbs=&upt_showThumbs=hidden&up_startIndex=&upt_startIndex=hidden&up_imageLink=&upt_imageLink=hidden&lang=en&country=us&.lang=en&.country=us&synd=ig&mid=374&ifpctok=8346853360959891281&parent=http:// www.google.com&extern_js=/extern_js/f/CgJlbhICdXMrMAo4ACwrMBI4ACwrMBM4ACwrMBU4ACw/P7va8B_WIzE.js' tried to access incompatible context 'http://www.gmodules.com/ig/ proxy//http://abpicasaphotosgadget.googlecode.com/svn/trunk/picasa.swf? 6' *** Security Sandbox Violation ***

This is _not_ in the sandbox.

On May 26, 4:18 pm, robv <robv@magma.ca> wrote:

Just thought I would add a little more info. The fetch content call that fails is the third call in a sequence. The first 2 calls go to the right url. Only the third fails. They are tied together via the callbacks.

[Mon May 26 15:15:54 2008] [error] [client 66.249.84.11] V2-1{"HTTP_USER_AGENT":"FeedFetcher-Google; (+http:\\/\\/www.google.com \\/ feedfetcher.html)","HTTP_X_IGOOGLE_REQUEST":"1","HTTP_CACHE_CONTROL":"x- max-information- age=15","HTTP_HOST":"sting.whogivesahoot.com","HTTP_ACCEPT_ENCODING":"gzip","PATH":"\ \/sbin:\\/usr\\/sbin:\\/bin:\\/usr\\/bin:\\/usr\\/X11R6\\/ bin","SERVER_SIGNATURE":"<address>Apache\\/2.0.52 (Red Hat) Server at sting.whogivesahoot.com Port 80<\\/address>\ \n","SERVER_SOFTWARE":"Apache\\/2.0.52 (Red Hat)","SERVER_NAME":"sting.whogivesahoot.com","SERVER_ADDR":"67.192.126.213","SERVER_PORT":"80","REMOTE_ADDR":"66.249.84.11","DOCUMENT_ROOT":"\ \/var\\/www\\/ html","SERVER_ADMIN":"root@localhost","SCRIPT_FILENAME":"\\/var\\/www\ \/html\\/photo\\/v2\\/ getSession.php","REMOTE_PORT":"44081","GATEWAY_INTERFACE":"CGI\\/ 1.1","SERVER_PROTOCOL":"HTTP\\/ 1.1","REQUEST_METHOD":"GET","QUERY_STRING":"title=http%3A\\/\\/ sting.whogivesahoot.com\\/photo\\/t1\\/&platform=http%3A\\/\\/ 126.gmodules.com\\/ig\\/ifr","REQUEST_URI":"\\/photo\\/v2\\/ getSession.php?title=http%3A\\/\\/sting.whogivesahoot.com\\/photo\\/t1\ \/&platform=http%3A\\/\\/126.gmodules.com\\/ig\\/ifr","SCRIPT_NAME":"\ \/photo\\/v2\\/getSession.php","PHP_SELF":"\\/photo\\/v2\\/ getSession.php","REQUEST_TIME":1211832954,"argv":["title=http%3A\\/\\/ sting.whogivesahoot.com\\/photo\\/t1\\/&platform=http%3A\\/\\/ 126.gmodules.com\\/ig\\/ifr"],"argc":1}\\n [Mon May 26 15:15:54 2008] [error] [client 66.249.84.11] V2-2{"HTTP_USER_AGENT":"FeedFetcher-Google; (+http:\\/\\/www.google.com \\/ feedfetcher.html)","HTTP_X_IGOOGLE_REQUEST":"1","HTTP_CACHE_CONTROL":"x- max-information- age=15","HTTP_HOST":"sting.whogivesahoot.com","HTTP_ACCEPT_ENCODING":"gzip","PATH":"\ \/sbin:\\/usr\\/sbin:\\/bin:\\/usr\\/bin:\\/usr\\/X11R6\\/ bin","SERVER_SIGNATURE":"<address>Apache\\/2.0.52 (Red Hat) Server at sting.whogivesahoot.com Port 80<\\/address>\ \n","SERVER_SOFTWARE":"Apache\\/2.0.52 (Red Hat)","SERVER_NAME":"sting.whogivesahoot.com","SERVER_ADDR":"67.192.126.213","SERVER_PORT":"80","REMOTE_ADDR":"66.249.84.11","DOCUMENT_ROOT":"\ \/var\\/www\\/ html","SERVER_ADMIN":"root@localhost","SCRIPT_FILENAME":"\\/var\\/www\ \/html\\/photo\\/v2\\/ getFeed.php","REMOTE_PORT":"44100","GATEWAY_INTERFACE":"CGI\\/ 1.1","SERVER_PROTOCOL":"HTTP\\/ 1.1","REQUEST_METHOD":"GET","QUERY_STRING":"continent=10&yaya=6886391","REQUEST_URI":"\ \/photo\\/v2\\/getFeed.php?continent=10&yaya=6886391","SCRIPT_NAME":"\ \/photo\\/v2\\/getFeed.php","PHP_SELF":"\\/photo\\/v2\\/ getFeed.php","REQUEST_TIME":1211832954,"argv": ["continent=10&yaya=6886391"],"argc":1}\\n [Mon May 26 15:15:55 2008] [error] [client 66.249.84.11] V2-3{"PATH":"\ \/sbin:\\/usr\\/sbin:\\/bin:\\/usr\\/bin:\\/usr\\/X11R6\\/ bin","SERVER_SIGNATURE":"<address>Apache\\/2.0.52 (Red Hat) Server at 148132-db1.tripadvisor.com Port 80<\\/address>\ \n","SERVER_SOFTWARE":"Apache\\/2.0.52 (Red Hat)","SERVER_NAME":"148132- db1.tripadvisor.com","SERVER_ADDR":"67.192.126.213","SERVER_PORT":"80","REMOTE_ADDR":"66.249.84.11","DOCUMENT_ROOT":"\ \/var\\/www\\/ html","SERVER_ADMIN":"root@localhost","SCRIPT_FILENAME":"\\/var\\/www\ \/html\\/photo\\/v2\\/ getHTML.php","REMOTE_PORT":"44214","GATEWAY_INTERFACE":"CGI\\/ 1.1","SERVER_PROTOCOL":"HTTP\\/ 0.9","REQUEST_METHOD":"GET","QUERY_STRING":"imageSize=282&yaya=6886391&newUser=63","REQUEST_URI":"\ \/photo\\/v2\\/getHTML.php? imageSize=282&yaya=6886391&newUser=63","SCRIPT_NAME":"\\/photo\\/v2\\/ getHTML.php","PHP_SELF":"\\/photo\\/v2\\/getHTML.php","REQUEST_TIME": 1211832955,"argv":["imageSize=282&yaya=6886391&newUser=63"],"argc":1}\ \n

On May 26, 3:19 pm, robv <robv@magma.ca> wrote:

Dan,

This is occuring in production, not the sandbox.

This first request/response is the messed up one. I did not ever give the app the server name "148132-db1.tripadvisor.com". I don't know how the proxy got it .

66.249.84.11 - - [26/May/2008:13:40:10 -0500] "GET /photo/v2/ getHTML.php?imageSize=282&yaya=4051474&newUser=62" 200 5452 "-" "-"

[Mon May 26 13:40:10 2008] [error] [client 66.249.84.11] V2{"PATH":"\\/ sbin:\\/usr\\/sbin:\\/bin:\\/usr\\/bin:\\/usr\\/X11R6\\/ bin","SERVER_SIGNATURE":"<address>Apache\\/2.0.52 (Red Hat) Server at 148132-db1.tripadvisor.com Port 80<\\/address>\ \n","SERVER_SOFTWARE":"Apache\\/2.0.52 (Red Hat)","SERVER_NAME":"148132- db1.tripadvisor.com","SERVER_ADDR":"67.192.126.213","SERVER_PORT":"80","REMOTE_ADDR":"66.249.84.11","DOCUMENT_ROOT":"\ \/var\\/www\\/ html","SERVER_ADMIN":"root@localhost","SCRIPT_FILENAME":"\\/var\\/www\ \/html\\/photo\\/v2\\/ getHTML.php","REMOTE_PORT":"59588","GATEWAY_INTERFACE":"CGI\\/ 1.1","SERVER_PROTOCOL":"HTTP\\/ 0.9","REQUEST_METHOD":"GET","QUERY_STRING":"imageSize=282&yaya=4051474&newUser=62","REQUEST_URI":"\ \/photo\\/v2\\/getHTML.php? imageSize=282&yaya=4051474&newUser=62","SCRIPT_NAME":"\\/photo\\/v2\\/ getHTML.php","PHP_SELF":"\\/photo\\/v2\\/getHTML.php","REQUEST_TIME": 1211827210,"argv":["imageSize=282&yaya=4051474&newUser=62"],"argc":1}\ \n

This one is the one that works and is using the "sting.whogivesahoot.com" address which I sent in the request.

66.249.84.11 - - [26/May/2008:13:41:33 -0500] "GET /photo/v1/ getHTML.php?imageSize=282&newUser=5782063 HTTP/1.1" 200 5232 "-" "FeedFetcher-Google; (+http://www.google.com/feedfetcher.html)"

[Mon May 26 13:41:33 2008] [error] [client 66.249.84.11] V1{"HTTP_USER_AGENT":"FeedFetcher-Google; (+http:\\/\\/www.google.com\ \/ feedfetcher.html)","HTTP_X_IGOOGLE_REQUEST":"1","HTTP_CACHE_CONTROL":"x- max-information- age=15","HTTP_HOST":"sting.whogivesahoot.com","HTTP_ACCEPT_ENCODING":"gzip","PATH":"\ \/sbin:\\/usr\\/sbin:\\/bin:\\/usr\\/bin:\\/usr\\/X11R6\\/ bin","SERVER_SIGNATURE":"<address>Apache\\/2.0.52 (Red Hat) Server at sting.whogivesahoot.com Port 80<\\/address>\ \n","SERVER_SOFTWARE":"Apache\\/2.0.52 (Red Hat)","SERVER_NAME":"sting.whogivesahoot.com","SERVER_ADDR":"67.192.126.213","SERVER_PORT":"80","REMOTE_ADDR":"66.249.84.11","DOCUMENT_ROOT":"\ \/var\\/www\\/ html","SERVER_ADMIN":"root@localhost","SCRIPT_FILENAME":"\\/var\\/www\ \/html\\/photo\\/v1\\/ getHTML.php","REMOTE_PORT":"35884","GATEWAY_INTERFACE":"CGI\\/ 1.1","SERVER_PROTOCOL":"HTTP\\/ 1.1","REQUEST_METHOD":"GET","QUERY_STRING":"imageSize=282&newUser=5782063","REQUEST_URI":"\ \/photo\\/v1\\/getHTML.php? imageSize=282&newUser=5782063","SCRIPT_NAME":"\\/photo\\/v1\\/ getHTML.php","PHP_SELF":"\\/photo\\/v1\\/getHTML.php","REQUEST_TIME": 1211827293,"argv":["imageSize=282&newUser=5782063"],"argc":1}\\n

Rob

On May 26, 2:55 pm, "Dan (Google Employee)" <api.@google.com> wrote:

Hi Rob,

Is this issue occurring in production or in the sandbox? There are some ongoing experiments with rewriting URLs (for proxying) but they shouldn't affect production. If the issue is in the sandbox, could you show the code that is being rewritten?

Thanks, Dan

On May 26, 11:08 am, robv <robv@magma.ca> wrote:

I am having trouble on initial install of a my widget. The very first request on an install does not contain the expected header information such as the server name. If I uncheck the cached checkbox in MyGadgets, it then behaves as expected. My gadget.xml has not changed in such a way as to explain this behavior, and the problem has persisted for a couple of days too.

In addition, on the first request it seems like the Google proxy rewrites the request to use the domain name that Google thinks it should be using rather than the one requested in the initial request. Perhaps the proxy is doing a reverse DNS lookup on the IP for the domain name I sent. It makes no sense, but I am grasping at straws here.

And of course, on another widget on the same two servers, the problem doesn't happen. This even though the requests look the same. I am not sure how to get around this. Is this anything that anyone else has seen?