XF 1.1 Weirdest title issues in XenForo

[Floren]

I have something really weird happening in XenForo: If I create a thread title with specific keywords on it, the title is completely hidden. For example, as soon I create a thread with keyword "CentOS" on it, the entire title disappears in forumdisplay view:



As soon I remove the "CentOS" keyword, title shows back like magic. This happens in forumdisplay only, I can see fine the thread title elsewhere. I tried other keywords, the issue happens specifically on "CentOS" keyword only. I'm going to leave the "CentOS" keyword present into title, so you see live what I mean about the thread title. Running a query, the post displays properly the title into database, so is not something related to badly stored data.

I talked to Mike and he has no idea where the issue could be. This is not a browser cache issue, I get this issue on every single possible or impossible browser. Something is definitely wrong and extremely annoying. I would appreciate your help to solve the puzzle. Thank you.

 

[Digital Doctor]

what about these (in the title):

tftp
wget
nmap

 

[Russ]

Thinking the obvious and not sure why it would cause that but did you try reverting thread_list_item by chance(if there's any changes made to it)

 

[Floren]

I have no template customizations, everything is stock.

 

[Floren]

what about these (in the title):

tftp
wget
nmap

Whoa, the 3 keywords don't work also! How did you found this?
https://www.axivo.com/community/threads/upgrade-to-openssl-1-0-1-in-nmap-no-tls-1-1-or-1-2.214/

 

[Digital Doctor]

My friend had this problem.
It's a mod_security thing.
Xenforo doesn't play well with it.

I bet Cent_OS is fine

 

[Floren]

I run Nginx? No mod_security installed. Ya, "Cent_OS" works fine.
So how do I fix this?

 

[Digital Doctor]

I tested CentOS on his site .. and it didn't trigger any problems ..... I think.

This is the mod security thing .... a workaround is outlined.

http://xenforo.com/community/threads/random-method-not-implemented-errors.29971/

 

[Floren]

Well, I don't have mod_security installed, nor Apache. I have nowhere defined in Nginx a rewrite rule related to the above mentioned keywords so the problem is definitely not related. In fact, I run a minimal install CentOS 6 setup with the strictest number of packages installed on my box.

I left in place the "CentOS" keyword, so any ninja coders can look at page output. I'm curious if anyone finds a solution.

 

[Digital Doctor]

Read that thread.
I know Wireshark helped figure out what the problem was.

Weird that the same words tftp, nmap, wget give problems just like mod_security.

 

[Floren]

I read it, it states this interesting bug. This is definitely not related to mod_security...
Can any devs look into it and post a proper solution? Thanks a lot.

Edit: I noticed that if the keyword is last into thread title, it displays properly in forumdisplay.

 

[Digital Doctor]

Edit: I noticed that if the keyword is last into thread title, it displays properly in forumdisplay.

OMG>
How the hell did you figure that out !

The plot thickens

The fix I've seen implemented for the mod_security triggers was to rewrite things
ie. turn all instances of
tftp to t-f-t-p
CentOS to Cent_OS
etc. etc.

 

[Floren]

Try a thread on your forum with one of those keywords at end, it should work.
Well, as said before... I DON'T run mod_security so it is not relevant to say is related to it.

Edit: confirmed.

 

[Digital Doctor]

What about server errors ?
Do the logs say anything ?
501 errors ?
Do you run something analogous to mod_security ?

 

[Floren]

Actually, it is not the keyword position but rather the title string length! Whoa...
https://www.axivo.com/community/forums/off-topic.17/

"Keyword wget turns title blank" OK
"Keyword wget turns title with CentOS keyword blank" FAIL
"Bug in XenForo: nmap" OK

There are no errors present into logs, that is the first thing I looked for. Obvious when troubleshooting things, no?
However, there is someone passionate to check if I have the /forums-open directory on my server:

2012/09/20 05:58:42 [error] 20409#0: *124516 "/var/www/html/forums-open/index.php" is not found (2: No such file or directory), client: 59.56.72.31, server: www.axivo.com, request: "GET /forums-open/ HTTP/1.0", host: "www.axivo.com", referrer: "http://www.axivo.com/forums-open/"
2012/09/20 08:18:08 [error] 20408#0: *125536 "/var/www/html/forums-open/index.php" is not found (2: No such file or directory), client: 59.56.72.31, server: www.axivo.com, request: "GET /forums-open/ HTTP/1.0", host: "www.axivo.com", referrer: "http://www.axivo.com/forums-open/"
2012/09/20 10:54:26 [error] 20409#0: *126585 "/var/www/html/forums-open/index.php" is not found (2: No such file or directory), client: 27.151.98.77, server: www.axivo.com, request: "GET /forums-open/ HTTP/1.0", host: "www.axivo.com", referrer: "http://www.axivo.com/forums-open/"
2012/09/20 13:48:42 [error] 20408#0: *127720 "/var/www/html/forums-open/index.php" is not found (2: No such file or directory), client: 27.151.98.77, server: www.axivo.com, request: "GET /forums-open/ HTTP/1.0", host: "www.axivo.com", referrer: "http://www.axivo.com/forums-open/"
2012/09/20 16:48:38 [error] 20408#0: *128664 "/var/www/html/forums-open/index.php" is not found (2: No such file or directory), client: 27.151.98.77, server: www.axivo.com, request: "GET /forums-open/ HTTP/1.0", host: "www.axivo.com", referrer: "http://www.axivo.com/forums-open/"
2012/09/20 22:46:54 [error] 20408#0: *130700 "/var/www/html/forums-open/index.php" is not found (2: No such file or directory), client: 71.72.30.62, server: www.axivo.com, request: "GET /forums-open/ HTTP/1.1", host: "www.axivo.com"
2012/09/20 23:43:05 [error] 20408#0: *131274 "/var/www/html/forums-open/index.php" is not found (2: No such file or directory), client: 66.249.72.10, server: www.axivo.com, request: "GET /forums-open/ HTTP/1.1", host: "www.axivo.com"

Stop repeating "mod_security" and "mod" this or that.

In fact, I run a minimal install CentOS 6 setup with the strictest number of packages installed on my box.

Clearer than this... it cannot be.

 

[Digital Doctor]

Titles are OK when you search for them.
Like this: https://www.axivo.com/community/search/member?user_id=1

 

[Floren]

I'm pretty sure is not related to some server dependency, but rather something weird in a JavaScript file.

 

[Jake Bunce]

I have seen this exact problem caused by client applications like Norton Internet Security. Did you try a different computer?

 

[Digital Doctor]

I have seen this exact problem caused by client applications like Norton Internet Security. Did you try a different computer?

All the problems happened on multiple PCs.
Including a few of mine.

 

[lazy llama]

I'm not seeing this on a test install on Raspbian using nginx, which would indicate it's not a plain nginx or XF issue.