hangs up at https://*********/signin/challenge/sl/password about evilginx HOT 5 CLOSED

Hard for me to help with so little information. You will have to debug if this is nginx stalling the connection or a problem with web browser. Check out web developer tools in Chrome.

from evilginx.

Failed to execute ‘postMessage’ on ‘DOMWindow’: The target origin provided (‘https://accounts.google.com’) does not match the recipient window’s origin (‘https://my.site’).

from evilginx.

I had a problem with my ssl cert on the accounts.my.site issue resolved

from evilginx.

Great! Glad that worked out for you.

from evilginx.

hi, sorry for opening this issue again.
i have same as that error and all of my certs are ok. the error is:

Failed to execute ‘postMessage’ on ‘DOMWindow’: The target origin provided (‘https://accounts.google.com’) does not match the recipient window’s origin (‘https://mysite.com’).

Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://accounts.mysite.com/_/common/diagnostics/?hl=en&_reqid=37518&rt=j. (Reason: CORS header ‘Access-Control-Allow-Origin’ missing).

from evilginx.