Bug 175786 – [SOUP] Can't save images if host disallows hotlinking (referrer not passed when downloading)

• Status: NEW
• Component: WebKitGTK

[Bastien Nocera]

On both Discogs, and the Arcade Flyer Archive, I couldn't download images as the website don't allow hot linking and webkit doesn't seem to pass referer information when downloading images to save them.

1. Go to:
http://flyers.arcade-museum.com/?page=flyer&db=videodb&id=182&image=1
2. Right click on the big image and select "Save Image As..." and confirm the destination

We get "Error Downloading: Forbidden" instead of the download working as expected. The image is also available in cache.

[Bastien Nocera]

Alexey, it's referer (with the typo) ;)
https://en.wikipedia.org/wiki/HTTP_referer

[Michael Catanzaro]

(In reply to Bastien Nocera from comment #1)
> Alexey, it's referer (with the typo) ;)
> https://en.wikipedia.org/wiki/HTTP_referer

Not that this matters at all, but we're pretty consistent in using the terminology "referrer" everywhere (except the HTTP header itself, of course).

[Michael Catanzaro]

I'm assuming this is soup-specific, unless Alexey says otherwise.

[Bastien Nocera]

See https://bugs.webkit.org/show_bug.cgi?id=174730

[Bastien Nocera]

I can't reproduce the problem on the arcade-museum website, but I can still reproduce it with discogs.

1. Go to https://www.discogs.com/Capcom-Sound-Team-Final-Fight/release/9597740
2. Click on the cover of the disc in the top left-corner
3. Right-click, save image as yields:
Error downloading: Service unavailable

[Carlos Garcia Campos]

(In reply to Bastien Nocera from comment #5)
> I can't reproduce the problem on the arcade-museum website, but I can still
> reproduce it with discogs.
> 
> 1. Go to
> https://www.discogs.com/Capcom-Sound-Team-Final-Fight/release/9597740
> 2. Click on the cover of the disc in the top left-corner
> 3. Right-click, save image as yields:
> Error downloading: Service unavailable

But that's not because of the referrer, or do you mean you can still reproduce it even with path attached to bug #174730 applied?

[Bastien Nocera]

(In reply to Carlos Garcia Campos from comment #6)
> (In reply to Bastien Nocera from comment #5)
> > I can't reproduce the problem on the arcade-museum website, but I can still
> > reproduce it with discogs.
> > 
> > 1. Go to
> > https://www.discogs.com/Capcom-Sound-Team-Final-Fight/release/9597740
> > 2. Click on the cover of the disc in the top left-corner
> > 3. Right-click, save image as yields:
> > Error downloading: Service unavailable
> 
> But that's not because of the referrer, or do you mean you can still
> reproduce it even with path attached to bug #174730 applied?

I didn't test with the patch from bug 174730. The original "Arcade Museum" problem might also not have been a referer problem (though it's impossible to test for now), so that might still be a dupe of bug 174730.

[Michael Catanzaro]

OK, since discogs is now fixed, and the Arcade Museum website seems to have changed, is it safe to close this now? Or do we suspect there are other websites that really do block downloads due to missing Referer?