Accor login is blocked on Orion (via Imperva bot/security protection) - other browsers work fine!

gp

On Orion, if you try to visit https://login.accor.com from Orion, you will get a WAF-type error from Iperva. This does not appear on other browsers (i.e. Firefox) from the same IP address

@laiz was able to reproduce this, so this is probably entirely fingerprinting of the browser (engine).

Orion should behave as other browsers like Firefox do (and pass whatever Iperva is doing), thus loading the login page.

Version 1.1.1 (149-rc), WebKit 625.1.8

Tahoe (26)

dino

gp we tried this with all four browsers (Safari, Chrome, Firefox, Orion) with three different IPs and none of the browser could make it work.

gp

OK - exact steps I've followed on Firefox and Orion side-by-side.

Firefox is fine, Orion gives the above error.

Visit https://all.accor.com/a/en.html
Deny/ reject cookies on the pop-up
Click sign in/ sign up (at the top right)
Pick sign in
a) On Firefox, goes to login screen
b) On Orion, goes to the above message

I wonder if they are doing something funny with the referrer? Looking at dev tools, I don't see the referer all.accor.com coming through on login.accor.com.

Visiting login.accor.com directly on Firefox also gives the above error - I think that the issue could be that imperva (their site guard thing) is checking referer or another parameter that is not being passed along by Orion, but is by Firefox.

(I tested this in compatibility mode on Orion btw)

dino

gp now I can reproduce this. Thanks for exact steps.