Support GoonBox Support

Edit: I just want to preface this by saying
Code: 
goonbox
image/thumbnail loading works perfectly fine from my same IP when using any Chromium-based browser. This appears to be an issue related to Firefox's "Opaque Response Blocking" (ORB) policy in reaction to receiving an
Code: 
HTTP 403
.



In Mozilla Firefox, can't load any goonbox/cuckcapital images unless the cuckcapital .JPG is directly loaded in its own new tab without any referer (Doesn't load images regardless of ublock origin/umatrix/FF built-in Tracking Protection being enabled/disabled). Here is the URL I was testing from:

https://goonbox.cr/img/t2IWpU5

If I click "download image", I get this:


If I copy the jpg URL ( https://simp6.cuckcapital.cr/images4/29ebf49d-5622-4cb9-a5b6-c6621db4816c.jpg ) from the "Download Image" page, I can load it by pasting it into its own new tab. However, since Cloudflare returns "no-cache" in the response header, I can't just go back to goonbox, hit refresh, and expect my local cache copy to show up on that page after loading the image directly on its own tab.

----- AI response below ( I don't know if this is helpful at all ) -----

The issue is that simp6.cuckcapital.cr is rejecting cross-origin requests from goonbox.cr by serving a 403 JSON error instead of an image file, which triggers Firefox's strict Opaque Response Blocking (ORB) policy.

Here is a summary of the exact changes the engineer can make, categorized by where they need to apply them:



Option 1: Changes on
Code: 
simp6.cuckcapital.cr
(The Image Host — Recommended)
This is the most effective place to fix the issue. The image server needs to tell browsers that
Code: 
goonbox.cr
is allowed to embed these files.

  • Add CORS Headers: Configure the web server (Nginx, Apache, or Node.js) hosting the images to allow cross-origin requests from the front-end site. It needs to send these headers with every image response:
    http

    Code: 
    		Access-Control-Allow-Origin: https://goonbox.cr
Access-Control-Allow-Methods: GET, OPTIONS

    Code: 
    Use code with caution.
  • Fix Fallback MIME-Types: Currently, when a request fails or is restricted, the server responds with
    Code: 
    Content-Type: application/json
    . The engineer should change the server behavior so that if a request fails, it serves a standard fallback image (like a
    Code: 
    404.jpg
    or
    Code: 
    blocked.png
    ) with a proper
    Code: 
    image/jpeg
    or
    Code: 
    image/png
    MIME-type. This stops Firefox from triggering the ORB security block.



Option 2: Changes on Cloudflare (The Security Layer)
If
Code: 
simp6.cuckcapital.cr
uses Cloudflare, Cloudflare's Hotlink Protection or Web Application Firewall (WAF) is likely generating that
Code: 
403
JSON error page.

  • Create a WAF Skip Rule: The engineer should go to the Cloudflare Dashboard for
    Code: 
    cuckcapital.cr
    and navigate to Security > WAF > Custom Rules. They can create a rule that allows requests coming from GoonBox:
    • Field:
      Code: 
      Referer
      or
      Code: 
      Origin
    • Operator:
      Code: 
      contains
    • Value:
      Code: 
      goonbox.cr
    • Action:
      Code: 
      Skip
      (Hotlink Protection / Managed Rules)
  • Adjust Hotlink Protection: If they have the global "Hotlink Protection" toggle turned on under Scrape Shield, they can turn it off and replace it with a custom firewall rule that explicitly whitelists trusted domains like
    Code: 
    goonbox.cr
    .



Option 3: Changes on goonbox.cr (The Front-End Website)
If the engineer only controls the front-end site (goonbox.cr), they can force the browser to omit tracking headers so the image host doesn't realize the request is cross-origin.

  • Apply a Global Referrer Policy: Add a <meta> tag to the <head> of the website to instruct the browser never to leak the origin trail to image elements:
    html

    Code: 
    		<meta name="referrer" content="no-referrer">

    Code: 
    Use code with caution.
  • Update Image Tags Individually: Alternatively, they can append the referrerpolicy attribute directly to the HTML image tags that load from that server:
    html

    Code: 
    		<img src="https://cuckcapital.cr" referrerpolicy="no-referrer">

    Code: 
    Use code with caution.

    Note: If Cloudflare is checking advanced metadata like
    Code: 
    Sec-Fetch-Site: cross-site
    , this front-end trick alone might not work, making Option 1 or Option 2 much more reliable.
 
Same. I'm guessing it's tied to the browser or VPN. If I run the image download script, the downloads work fine, and trying an image on a different browser worked.
 
This is what it looks like for me

This started a couple days ago, but the user icons disappearing is new. If I right click the broken image and chose open image in a new window this comes up
{
"success": false,
"message": "not allowed"
}
 
So, from what I understand, the image preview doesn't work/load. The irony is that I will use goonbox but instead of inseting i will just provide direct links to them.
https://simp6.cuckcapital.cr/panda/th/610624e1-32d2-47d2-96e0-b14a533dbc3d.png
(Here is what every post with images sent via goonbox looks like)

Strangely, only when opening a direct link such as this one does it load. But when I try to insert it, I have the same thing in the preview.

Then, after clicking on the icon results in this:

https://simp6.cuckcapital.cr/panda/...s=-Vjf37IdjqQkR5ZTn8uCMpZr501OtfGzQj25B95cs2k
(The image does not display properly, but it is not 100% universal, and when going into the album, it shows some images)

After clicking on Download Image, it displays correctly.

OK, insert a 10-minute pause. So I checked different browsers, as the guy above did. And on all* browsers, working on chromium display worked. Although the main issue for me was still persistent on Opera and Opera GX, which are based on it.

I started selectively turning off browser extensions (after focusing on ad blockers and getting no results). After a while, there was no progress, but after tweaking the "uBlock" and "AdBlock" extensions, I turned them back on (for like the n-th time), and this time, during a website reload, the display worked just fine. I will assume that ad blockers were the cause of it, but I will state that it did not work with them either way, applied or not, and after reloading enough times, it finally clicked.

Edit:

Also, from what I saw just looking at different threads, it did not solve it completely, but like 90-95% of all images from goonbox display properly for me, and those that didn't display were normal after clicking them, so something on the site, not on goonbox itself, had an issue
 
Any information how i can post in a thread that im unable to post? It said i need to be in simp group? IM new here any tips to get that simp group
 
hey, every single one

Chromium works, seems every Firefox-based browser is borked, I must release soon! please fix!!1!! #suffering
 
temp fix for this
browser settings > search for "Limit cross-origin referrers" and disable it
 
Hi everyone,

I'm looking for the feature that lets you click the left and right arrows on an image to go to the previous or next one (the image carousel or gallery view). I can't find it GoonBox when I am inside an album. Is it hidden in a setting, or does it only work in a certain view?
Thanks
 
I think this is linked to what I wanted to mention. I use an extension that lets me hover over an image to enlarge it and the last couple of days it's only been showing thumbnail quality rather than larger images. I don't know if just the automatic embed links have changed now compared to before, as I haven't uploaded anything in the last couple of days to notice.
 
Is goonbox.cr down, or is it just me? If it's just me, I live in Egypt, so maybe that's the issue.

Edit: When using a vpn it works fine, so it's 100% a geolocation ban.
 
Right now you have to complete a cloudflare challenge every time you click on a goonbox pic. This renders it unusable, please relax the settings a bit.
 
No that didn't make any difference, I'm not even connected to WiFi I'm just using mobile data. Tried with a VPN regardless and still the same thing
 
Does Goonbox stop providing Default BB Code for Medium Links? or am I missing something. :monkaHmm:



:thonk:
 
see this:

Also POKI will all existing medium links be auto-converted to thumbnails or is this gonna break all the previous links?

Finally, any update here? It would be nice to restore some organization.
 
Hi guys, I'm relatively new here and wanted some help adding pictures when starting a new thread. I click the ' Upload Images' button, takes me through to goonbox (I have an account) I then upload new pictures from my phone, but then nothing happens. Could you advise?

Thanks :)
 
You must log in or register to reply here.
Back
Top