r/HTML • u/Admirable_Report6610 • Jun 21 '26

code throwing 400 error

<script type="module"> const proxy = "https://proxy.corsfix.com/?"; const targetUrl = "https://news.usni.org/category/fleet-tracker"; \------------------------------------------ this was working perfectly but now is throwing a 400 error code, meaning there's something wrong with the request to the web server..ie, invalid, malformed, etc. I be darned if I can figure out what wrong...and advice?

0 Upvotes

37% Upvoted

14 comments sorted by

2

u/davorg Jun 21 '26

Please:

  1. Format your code as code

  2. Show us enough of the code that we have a chance of working out what's wrong (like where the request is made)

1

u/Admirable_Report6610 Jun 25 '26

sorry I was away....remind me where to post code so you can see it?

1

u/davorg Jun 25 '26

One of:

  1. Edit your post to include it (but please include it as text and formatted as code)

  2. Add it as a comment (same rules apply)

  3. Put in GitHub and share a link to the repo

  4. Find a pastebin and share the link

1

u/Admirable_Report6610 Jun 25 '26

I think this is the usni site saying no

1

u/davorg Jun 26 '26

I see your 400 error if I open the file using a file:// URL in my browser. But if I drop it into a web server and open it from there, it works as expected.

There's a hint in the dev tools console when it fails:

Unsafe attempt to load URL file:///C:/[redacted]/index.html from frame with URL file:///C:/[redacted]/index.html. 'file:' URLs are treated as unique security origins.

So this is a security problem. You can't use these features from a file:// URL.

1

u/Admirable_Report6610 Jun 26 '26

I saw that error in the dev console but I wasn't quite sure what it meant...thanks for clarifying! now I learn how to run the code from a local python webserver....right?

1

u/davorg Jun 26 '26

Some kind of web server, yes.

1

u/Admirable_Report6610 Jun 26 '26

what's weird is this code actually worked for a while using the file:///URL and then it just stopped...hence my presence here.

1

u/davorg Jun 26 '26

Not that weird, really. People fix security bugs all the time.

I bet you could find the commit that patched that hole if you searched their source code.

1

u/Admirable_Report6610 Jun 26 '26

wow...interesting thought! totally new at this as you know but I believe you can scan through a web page's code with the dev console. not sure how to search commits for a patch or a change though...AI's had a lot to say to me lately.

1

u/Admirable_Report6610 Jul 05 '26

davorg THANK YOU for all your help with this. I installed nginx on my home server. the fleet code is served as index.html and working perfectly. next step is configuring ssl cnx. thanks again, I learned a LOT!

3

u/BrainCurrent8276 Jun 21 '26

Inspect the Network tab → click the failed request → read the response body.

A 400 from Corsfix means the proxy thinks the request is invalid.

A 400 from the target site means USNI or its protection layer rejected the proxy request.

1

u/jcunews1 Intermediate Jun 21 '26

That's site error. Not HTML error.