S

securemepls

Please add a way to disable the auto-hide feature on the sidebar. When browsing pages that already have a sidebar navigation, the sidebar keeps jumping in the way (Version 0.99.131.2-rc (WebKit 621.1.2.111.4)).

The "View your order" link from my Kagi Store email constantly reloads/loops.

Steps to reproduce:

• I clicked on the order link in my kagi.com email.
• Orion gets partly through loading the link and reloads.

Version 0.99.128.2.1-rc (WebKit 619.1.11.111.2)
Build date Aug 3 2024
MacBook Pro (macOS Sonoma 14.7 build 23H124)

This exhibits the same behavior on STP and Safari 18 until the page stops loading. Compatibility mode doesn't seem to impact this.

The page should load correctly. Example on Firefox:

0.99.128.2.1-rc

Sonoma (14)

I guess it's more accurate to say the status bar doesn't render all Unicode tags. Makes my hover technique to check malicious URLs not effective.

The Status Bar in Orion is vulnerable to ASCII Smuggling.

In Chrome and Safari/STP, the status bar correctly shows the attempt as ASCII Smuggling on this webpage:
https://embracethered.com/blog/posts/2024/m365-copilot-prompt-injection-tool-invocation-and-data-exfil-using-ascii-smuggling/

Steps to reproduce:

1. Enable the status bar (View -> Show Status Bar).
2. Visit https://embracethered.com/blog/posts/2024/m365-copilot-prompt-injection-tool-invocation-and-data-exfil-using-ascii-smuggling/
3. Go to the "An Example Link With Hidden Data" section and hover over the https://wuzzi[.]net/ link.
4. Orion cuts off the ACSII characters after https://wuzzi[.]net/

Contrasted with:

• Chrome 128:
  

• Safari/STP:
  

Orion matches Firefox in how the hover is rendered, but it should instead match Chrome/Safari/STP.

Version 0.99.128.2.1-rc (WebKit 619.1.11.111.2)

Sonoma (14)

Steps to reproduce:

1. Browse to a repo on github in dark mode.
2. Select "Pull Requests"
3. Select "Closed"
4. Click on a closed pull request
5. Click on Files Changed.
6. Fonts load in the diff and then vanish.

Sometimes the diffs work, but the more you browse the more the diffs will consistently vanish.

Expected behavior:
Fonts shouldn't vanish.

Orion, OS version; hardware type:
Version 0.99.125.4-rc (WebKit 617.1.6)
Build date Sep 27 2023
MacBook Pro (macOS Ventura 13.5.2 build 22G91)

Image/Video:

The newest beta fixes this for me. You can close this as resolved.

Steps to reproduce:
https://www.illumio.com opens just fine in Safari, but when I try to open it in Orion it loads briefly and then goes blank with this error message at the top:

The process for this web page crashed or was terminated. To continue, try reloading the page or open a different website.

I tried adding www.illumio.com to the Compatibility Mode list, but it didn't make a difference.

Expected behavior:
Load the page even in a reduced functionality.

Orion, OS version; hardware type:
Version 0.99.123.3-beta (WebKit 615.1.16.1)
macOS 12.6.5
MacBook Pro (16-inch, 2019), 2.3 GHz 8-Core Intel Core i9

Image/Video:

First choice is #3 and second choice is #1. I like the compactness of them, yet they each make it obvious which tab is selected..

Steps to reproduce:

I was using a local instance of splunk running in docker. The URL contains an unencoded linefeed (%0A) after "Metric":

http://localhost:8000/en-US/app/search/search?q=search%20source="ping_rtt_accuvax_20230226.csv"%20host="solarwinds"%20sourcetype="csv"%20|%20timechart%20span=1h%20avg(Value)%20by%20Metric
|%20eventstats%20avg(Value)%20as%20average%20|%20eval%20average=round(average,0)&earliest=0&latest=&display.page.search.mode=verbose&dispatch.sample_ratio=1&workload_pool=&display.page.search.tab=visualizations&display.general.type=visualizations&display.visualizations.charting.chart=line&display.visualizations.charting.chart.showDataLabels=minmax&display.visualizations.charting.axisLabelsX.majorLabelStyle.rotation=0&display.visualizations.charting.axisY.abbreviation=none&sid=1677497926.84&display.visualizations.charting.chart.overlayFields=average

Expected behavior:
The linefeed character should be convert to %0A so the address bar doesn't overflow/wrap.

Orion, OS version; hardware type:
Version 0.99.123.3-beta (WebKit 615.1.16.1) running on macOS 12.6.3

Image/Video:

Steps to reproduce:
URL: https://login.tailscale.com/admin/acls

This is a regression; Version 0.99.121.1-beta (WebKit 615.1.11.7) rendered this page fine in Compatibility. Now we have this odd double scrollbar in 0.99.122. Safari works fine.

Expected behavior:
That middle scrollbar and odd artifact shouldn't exist.

Orion, OS version; hardware type:
MacBook Pro (16-inch, 2019), 12.6.1 (21G217)
Version 0.99.122-beta (WebKit 615.1.11.7)

Image/Video:

Steps to reproduce:
<Include steps to reproduce the bug; Did you try using Compatibility mode? If applicable, does Safari behave in the same way?>
We have an on-prem gitlab instance (GitLab Community Edition 15.4.2) which authenticates to Active Directory.
Steps to reproduce:

1. Login (suceeds)
2. Click on repo
3. Redirected back to login page.
4. Rinse repeat

Not reproducable on Safari. Compatibility mode fixes the issue.

Expected behavior:
Login once and browse repos without needing to enable compat mode.

Orion, OS version; hardware type:
Version 0.99.121.1-beta (WebKit 614.1.20)
macOS Monterey 12.6.1 build 21G217
MBP 16-inch, 2019, Intel