- Edited
Vlad I've been comparing the console logs between a working Netflix page and the Orion one and I noticed these in the console log which stood out from the rest:
One was: Unhandled Promise Rejection: TypeError: Type error
And the other was:
AES-CBC and AES-CTR do not provide authentication by default, and implementing it manually can result in minor, but serious mistakes. We recommended using authenticated encryption like AES-GCM to protect against chosen-ciphertext attacks.
The second one looks like it might be a solution if you could implement authenticated encryption.