Page MenuHomePhabricator

All http://bits.beta.wmflabs.org/static/master/* file urls return HTTP 403 Forbidden
Closed, ResolvedPublic

Description

Loading any page on a beta wiki fills the console up with 403 errors for all kinds of static resources

http://bits.beta.wmflabs.org/static/master/extensions/FlaggedRevs/frontend/modules/img/arrow-down.png
Failed to load resource: the server responded with a status of 403 (Forbidden)

http://bits.beta.wmflabs.org/static/master/resources/assets/poweredby_mediawiki_176x62.png
Failed to load resource: the server responded with a status of 403 (Forbidden)

http://bits.beta.wmflabs.org/static/master/extensions/FlaggedRevs/frontend/modules/img/doc-magnify.png
Failed to load resource: the server responded with a status of 403 (Forbidden)

http://bits.beta.wmflabs.org/static/master/resources/assets/poweredby_mediawiki_176x62.png
Failed to load resource: the server responded with a status of 403 (Forbidden)

http://bits.beta.wmflabs.org/static/master/extensions/FlaggedRevs/frontend/modules/img/arrow-down.png
Failed to load resource: the server responded with a status of 403 (Forbidden)

http://bits.beta.wmflabs.org/static/master/extensions/ImageMetrics/resources/non-cors-test.js?_=0.8168604637030512
Failed to load resource: the server responded with a status of 403 (Forbidden)

Main_Page:1
Script from origin 'http://bits.beta.wmflabs.org' has been blocked from loading by Cross-Origin Resource Sharing policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://en.wikipedia.beta.wmflabs.org' is therefore not allowed access. The response had HTTP status code 403.

http://bits.beta.wmflabs.org/static/master/extensions/ImageMetrics/resources/cors-test.js?_=0.15045604505576193
Failed to load resource: the server responded with a status of 403 (Forbidden)

Possibly related:

Event Timeline

Krinkle raised the priority of this task from to Needs Triage.
Krinkle updated the task description. (Show Details)
Krinkle added subscribers: Krinkle, Ryasmeen, ori.
Krinkle set Security to None.
Krinkle added a project: Deployments.
Mattflaschen-WMF triaged this task as Unbreak Now! priority.May 5 2015, 1:37 AM

Note this has nothing to do with CORS AFAICT. Just visiting the file directly or using curl results in the same:

curl 'http://bits.beta.wmflabs.org/static/master/extensions/EventLogging/modules/ext.eventLogging.core.js'
ori claimed this task.