Bug 480867

Summary:	Plasma Integration blocks websites powered by Imperva
Product:	[Plasma] plasma-browser-integration	Reporter:	faynealdan
Component:	Chrome	Assignee:	Kai Uwe Broulik <kde>
Status:	REPORTED ---
Severity:	normal	CC:	vonruhne
Priority:	NOR
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	Other
OS:	Microsoft Windows
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:
Attachments:	Imperva error screen on a fresh Chrome install with only the Plasma Integration extension added

Description faynealdan 2024-02-04 20:03:17 UTC

Created attachment 165546 [details]
Imperva error screen on a fresh Chrome install with only the Plasma Integration extension added

SUMMARY
Having the Plasma Integration extension installed causes websites powered by Imperva to fail to load after first navigation.

STEPS TO REPRODUCE
1. Create a new profile in Google Chrome or Brave Browser.
2. Install Plasma Integration in the new profile: https://chromewebstore.google.com/detail/plasma-integration/cimiefiiaegbelhefglklhhakcgmhkai
3. Navigate to a website that uses Imperva. For example: https://www.pokemon.com
4. Refresh the webpage.

OBSERVED RESULT
You get an error page stating that "This request was blocked by our security service"

EXPECTED RESULT
Website loads as expected.

SOFTWARE/OS VERSIONS
Windows: Windows 11 23H2

ADDITIONAL INFORMATION
This only occurs on newly visited sites *after* installing Plasma Integration. It's also persistent once you trigger it, even if you remove the extension. For testing, you should clear site data when you install or remove the extension if you've already visited the site. Also, I only have the extension on Windows 11 because I sync the extension to a Linux machine. I don't have access to Linux right now to test the bug there.

Comment 1 Alex 2025-07-10 15:44:10 UTC

Can confirm. We have pharmacy called Safeway (aka Albertsons) in our area that uses Imperva. This bug caused a few moments of confusion as I was denied access to it after attempting to login. 

URL in question: https://www.safeway.com/pharmacy.html

An option to add website exceptions might be useful in this cases like these. Or if there is any technical information from the Plasma Integration side that I might be able to relay to Imperva to keep this from happening, maybe I can locate an associate on the back-end to add an exception.

Comment 2 faynealdan 2025-07-10 17:14:52 UTC

> An option to add website exceptions might be useful in this cases like these. 

Even with such an option, most users won't know about the issue if they have multiple extensions installed; especially, since the issue persists after uninstalling the extension until the user clears site data.

Comment 3 Kai Uwe Broulik 2025-07-10 18:36:56 UTC

lol the Internet snakeoil is getting worse and worse.

fwiw I cannot even access the pages anymore in incognito mode (where p-b-i is not running), so I’m afraid I cannot investigate. I suspect it’s the MPRIS or WebShare stuff that replaces certain navigatior APIs.