Chrome blocking downloads?

[HeuristicsInc]

Tonight I was trying to download all of the mp3s for the current fight and for every one it triggered a block:
*.mp3 can't be downloaded securely

Going to the help shows this:

Why the download was blocked
Your file download may be blocked for one of a few reasons:

We think it might be a malicious, unwanted, uncommon, or insecure file.
Malicious: You tried to download malware.
Unwanted: You tried to download a deceptive piece of software. This program, disguised as a helpful download, may actually make unexpected changes to your computer or device.
Uncommon: You tried to download an unfamiliar and potentially dangerous piece of software.
Insecure: You tried to download a file or program that wasn't secure but was started on a secure page. In some cases, you can choose to download anyway.
We've found that the website you tried to download the file from has been known to distribute malware.

Has anyone else seen this ? Not sure why songfight would be "known to distribute malware". I'm not even downloading software.
-bill

[Lunkhead]

Insecure: You tried to download a file or program that wasn't secure but was started on a secure page. In some cases, you can choose to download anyway.

That rings a bell. The site supports https (secure) and http (not secure) and it looks like when I go to https://www.songfight.org/ it looks like the links on the page for the mp3 files are http links, not https. I have no idea why that would cause issues for you but not for me. I don't recall ever having that issue. But maybe there is some security setting or exception that can be made in your Chrome preferences for songfight.org.

This site https://www.ghacks.net/2020/10/08/chrom ... re-is-why/ suggests trying right-click -> "Save As...", in case you weren't already trying that.

I will try to make a tweak to one of the scripts for updating the site to see if I can get it to write out https links going forward. Fixing that in the archive would be a big undertaking though I think.

[fluffy]

We had discussed one potential fix to that over on another thread. I still think the easiest/safest approach is to change index.php and songpage.php to strip out 'http://songfight.org' at render time.

[HeuristicsInc]

This site https://www.ghacks.net/2020/10/08/chrom ... re-is-why/ suggests trying right-click -> "Save As...", in case you weren't already trying that.

yeah, i was using "save link as" and still got that message.

[Lunkhead]

We had discussed one potential fix to that over on another thread. I still think the easiest/safest approach is to change index.php and songpage.php to strip out 'http://songfight.org' at render time.

Oh right, protocol relative links. Are we kind of swimming upstream though trying to continue to support access over http? It seems like the trend with browsers is that it will become more and more cumbersome to do so.

[fluffy]

I was suggesting turning it to a server relative link rather than protocol relative. Either is fine though. I just definitely don’t want to fix it in the archive data though since that’s likely to break a lot of things.

[Lunkhead]

Ah ok, I misunderstood what the strikethrough formatting was supposed to mean. That's definitely an option. I don't love the idea of leaving "http://" everywhere in the actual data and modifying every page that displays the mp3 links to convert them to relative links though. Maybe folks could tolerate some turbulence if I update the data and then fix whatever get broken ... ? I'd rather do work that gets me to the simplest possible end result if I can.

[fluffy]

I don't know why the strikethrough appeared, I sure as hell didn't add anything purposefully. phpBB was being weird and I didn't feel like investigating.

The safest way of fixing it at the data level would be to just turn the URLs all to https://. You'll also need to update the admin scripts to emit those as well.

[fluffy]

Oh, I see what happened, I wrote:

Code: Select all

 'http[s]://songfight.org' at render time.

and phpBB interpreted that as "start strikethrough" instead of printing a literal, uh, [ s ]

friggin phpBB

[jast]

BTW I just fixed the Review-O-Matic which broke when the URLs changed.

[Lunkhead]

Sorry about that. Thanks for fixing it! On the topic of the review-o-matic, I got a DM about it from somebody that noticed that a late added song wasn't in the zip file, a fight or two ago. Does the zip file only update once, when the new fight is first posted?

[Pigfarmer Jr]

I noticed that too a while back... last year at some point. The review-o-matic doesn't update with added songs either, or didn't.

[jast]

Yeah, I don't really do re-downloads. I suppose I could do them manually, though...