Created attachment 165546 [details] Imperva error screen on a fresh Chrome install with only the Plasma Integration extension added SUMMARY Having the Plasma Integration extension installed causes websites powered by Imperva to fail to load after first navigation. STEPS TO REPRODUCE 1. Create a new profile in Google Chrome or Brave Browser. 2. Install Plasma Integration in the new profile: https://chromewebstore.google.com/detail/plasma-integration/cimiefiiaegbelhefglklhhakcgmhkai 3. Navigate to a website that uses Imperva. For example: https://www.pokemon.com 4. Refresh the webpage. OBSERVED RESULT You get an error page stating that "This request was blocked by our security service" EXPECTED RESULT Website loads as expected. SOFTWARE/OS VERSIONS Windows: Windows 11 23H2 ADDITIONAL INFORMATION This only occurs on newly visited sites *after* installing Plasma Integration. It's also persistent once you trigger it, even if you remove the extension. For testing, you should clear site data when you install or remove the extension if you've already visited the site. Also, I only have the extension on Windows 11 because I sync the extension to a Linux machine. I don't have access to Linux right now to test the bug there.
Can confirm. We have pharmacy called Safeway (aka Albertsons) in our area that uses Imperva. This bug caused a few moments of confusion as I was denied access to it after attempting to login. URL in question: https://www.safeway.com/pharmacy.html An option to add website exceptions might be useful in this cases like these. Or if there is any technical information from the Plasma Integration side that I might be able to relay to Imperva to keep this from happening, maybe I can locate an associate on the back-end to add an exception.
> An option to add website exceptions might be useful in this cases like these. Even with such an option, most users won't know about the issue if they have multiple extensions installed; especially, since the issue persists after uninstalling the extension until the user clears site data.
lol the Internet snakeoil is getting worse and worse. fwiw I cannot even access the pages anymore in incognito mode (where p-b-i is not running), so I’m afraid I cannot investigate. I suspect it’s the MPRIS or WebShare stuff that replaces certain navigatior APIs.