Issue with Oneboxing an image from a specific domain

Product Support

AI-generated summary

Issue with Oneboxing an image from a specific domain

User Richie is experiencing an issue with Oneboxing an image from a specific domain, dronescene.co.uk, while an identical image from dev.dronescene.co.uk oneboxes without issues. Both domains are proxied via Cloudflare, but the IP address of the Discourse server is whitelisted. Richie has checked the HTTP response headers and found no differences between the two images, and there are no errors in the Discourse logs. Falco suggests checking the Cloudflare configuration, but Richie is unsure why this would affect only one image. Falco recommends checking the exact request, including verb, user-agent, and other headers, and trying to reproduce the issue with a cURL command.

1

Can anyone shed any light as to what may be going on here? :thinking:

I have two images. They are identical. The only difference is the domain name.

One image refuses to onebox on my Discourse running 3.3.0.beta2-dev (7a083daf27), the other image will onebox just fine with no issues.

Image one: https://dronescene.co.uk/images/uploads/temporiginal/test11.png

Image two: https://dev.dronescene.co.uk/images/uploads/temporiginal/test11.png

While scratching my head and trying to work out what the issue might be, I noticed the onebox url is appending a few extra parameters on the end of the URL:

Screenshot 2024-04-19 at 13.11.55
Screenshot 2024-04-19 at 13.11.551920×439 64.5 KB

I think this is a red herring though :thinking:

If I view both images directly in a browser tab and look at the HTTP response headers in the network tab of the browser console, I can’t see any differences between the two.

There are no errors in my Discourse logs.

Might I have applied some domain-specific settings on my Discourse that I’ve long since forgotten about? :thinking:

What else could cause the Onebox to throw a HTTP/404 when the image is actually there? :thinking:

Where might I start in debugging why one url works and the other does not? :thinking:

If relevant, both domains are proxied via Cloudflare - but all identical in the settings there too.

2

Isn’t one of the main uses of Cloudflare to block bots from requesting files from your site? Looks like it’s working as intended :laughing:

You should check your Cloudflare configuration, there will be a way to disable bot protection there.

3

Does it? :thinking:

What’s the difference? :thinking:

The IP address of the Discourse server is whitelisted on Cloudflare and I can curl/wget both images from the command line of the server running Discourse.

Struggling to understand why the onebox works on one image but not the other image.

4

Since you control both servers, can you check what is the exact request, down to verb, user-agent and other headers and try to reproduce with a cURL that mimics it?

5

Ah, excellent idea :+1: