infra/tickets

Fork 1

Anubis sometimes breaks Forge diffs #13262

New issue

Closed

opened 2026-04-09 11:48:48 +00:00 by kparal · 7 comments

kparal commented

2026-04-09 11:48:48 +00:00

Description of request

I just saw Anubis breaking a Forge diff when I clicked one of those horizontal expander buttons. Instead of showing the hidden lines, it showed Anubis message in the gutter, see screenshots.

### Description of request I just saw Anubis breaking a Forge diff when I clicked one of those horizontal expander buttons. Instead of showing the hidden lines, it showed Anubis message in the gutter, see screenshots.

anubis.png

195 KiB

anubis2.png

241 KiB

smoliicek added the

anubis

Needs investigation

labels

2026-04-09 19:07:04 +00:00

kevin commented

2026-04-09 19:08:36 +00:00

Owner

It would sure be nice to know what element/url it was trying to pull there... do you happen to be able to use the web inspector to find that?

kparal commented

2026-04-10 11:12:33 +00:00

Author

I left that as an infra homework 😆 It should be the same for everyone using PRs in Forge. Right now, when I opened a random PR and clicked one of the arrows in the gutter, this is the output:

Request headers:

GET /quality/testdays-web/blob_excerpt/7d0d2f94ba86e59f5dc83de90ffb91097bef77ac?last_left=20&last_right=20&left=23&right=23&left_hunk_size=0&right_hunk_size=0&path=requirements.txt&style=split&direction=down&wiki=&anchor=diff-19359a61ae2446b51b549167b014da2fcf265768K23 HTTP/2
Host: forge.fedoraproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: */*
Accept-Language: en-US,en;q=0.9,cs;q=0.8
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://forge.fedoraproject.org/
HX-Request: true
HX-Current-URL: https://forge.fedoraproject.org/quality/testdays-web/pulls/105/files
DNT: 1
Sec-GPC: 1
Connection: keep-alive
Cookie: <edited out>
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0
TE: trailers

Response headers:

HTTP/2 200 
strict-transport-security: max-age=31536000; includeSubDomains; preload
apptime: D=187392
cache-control: max-age=0, private, must-revalidate, no-transform
content-length: 1860
content-type: text/html; charset=utf-8
date: Fri, 10 Apr 2026 11:07:50 GMT
referrer-policy: same-origin
server: Apache
x-content-type-options: nosniff
x-fedora-proxyserver: proxy05.fedoraproject.org
x-fedora-requestid: adjaBlVS9-2Y4tJQmpcpfwAACos
x-frame-options: SAMEORIGIN, SAMEORIGIN
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

I left that as an infra homework 😆 It should be the same for everyone using PRs in Forge. Right now, when I opened a random PR and clicked one of the arrows in the gutter, this is the output: Request headers: ``` GET /quality/testdays-web/blob_excerpt/7d0d2f94ba86e59f5dc83de90ffb91097bef77ac?last_left=20&last_right=20&left=23&right=23&left_hunk_size=0&right_hunk_size=0&path=requirements.txt&style=split&direction=down&wiki=&anchor=diff-19359a61ae2446b51b549167b014da2fcf265768K23 HTTP/2 Host: forge.fedoraproject.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0 Accept: */* Accept-Language: en-US,en;q=0.9,cs;q=0.8 Accept-Encoding: gzip, deflate, br, zstd Referer: https://forge.fedoraproject.org/ HX-Request: true HX-Current-URL: https://forge.fedoraproject.org/quality/testdays-web/pulls/105/files DNT: 1 Sec-GPC: 1 Connection: keep-alive Cookie: <edited out> Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Priority: u=0 TE: trailers ``` Response headers: ``` HTTP/2 200 strict-transport-security: max-age=31536000; includeSubDomains; preload apptime: D=187392 cache-control: max-age=0, private, must-revalidate, no-transform content-length: 1860 content-type: text/html; charset=utf-8 date: Fri, 10 Apr 2026 11:07:50 GMT referrer-policy: same-origin server: Apache x-content-type-options: nosniff x-fedora-proxyserver: proxy05.fedoraproject.org x-fedora-requestid: adjaBlVS9-2Y4tJQmpcpfwAACos x-frame-options: SAMEORIGIN, SAMEORIGIN x-xss-protection: 1; mode=block X-Firefox-Spdy: h2 ```

smoliicek commented

2026-04-10 11:13:47 +00:00

Member

Does this happen consistently for you? Or was that just a one of thing? I keep trying to replicate it here, with no luck.

i tried switching connections before clicking on the "files changed" button, however, i just see anubis and then the page loads as normal

Does this happen consistently for you? Or was that just a one of thing? I keep trying to replicate it here, with no luck. i tried switching connections before clicking on the "files changed" button, however, i just see anubis and then the page loads as normal

kparal commented

2026-04-10 11:21:33 +00:00

Author

Yesterday it was the first time that I saw it. Sometimes Anubis is super-aggressive and I see it every few seconds (every couple interactions), so that probably very increases chance of this happening. In calmer times, the chance is likely minimal.

james commented

2026-07-30 15:32:25 +00:00

Member

Does this still happen now? And roughly how often?

FWIW I look at a bunch of PR diffs and I'm not sure I've ever seen it ... but workflow/etc. might be different.

Does this still happen now? And roughly how often? FWIW I look at a bunch of PR diffs and I'm not sure I've ever seen it ... but workflow/etc. might be different.

kparal commented

2026-08-03 09:28:40 +00:00

Author

I haven't seen this lately.