4w ago

Hey #Firefox hackers! My credit card issuer, Chase, does something funky where its page won't load unless it's in the focused tab:

https://secure.chase.com/web/auth/dashboard

I want to get it to load in the background instead.

Any ideas? I tried turning off all the lazy-load-enabled settings in about:config but that didn't work.

6 comments

Why are you trying to bypass a security feature of your bank? Because that's obviously what this is, so that nothing shady can happen in the background without your knowledge. This post seems pretty suspicious to me.
Maybe your interests are completely innocent, but this kind of bypass can and likely has been used nefariously.
@pluralistic@mamot.fr
Not sure this is related but since I started using CanvasBlocker addon, they make me use MFA every time with 8 digit pin and pw again. It’s as if part of their auth process is digital fingerprinting. Caveat: I’m not a hacker or expert (in case it wasn’t obvious). Why not just wait for page load? Shpilkes?
https://en.m.wiktionary.org/wiki/shpilkes
@pluralistic@mamot.fr Try this extension https://addons.mozilla.org/en-US/firefox/addon/always-visible/
- @c01x@infosec.exchange Thanks!
@pluralistic@mamot.fr is this background tab throttling? Sounds like that’s not what you tried disabling. This website seems semi decent at offering help: https://www.itechtics.com/disable-tab-throttling/#disable-sleeping-tabs-in-google-chrome
@pluralistic@mamot.fr
I get the same results in Chrome and Firefox: if you open that URL in a background tab it waits for you to switch to it, so it looks like something Chase is doing on purpose.
When it does render, the url is updated to https://secure.chase.com/web/auth/dashboard#/dashboard/overview
Chase appears to use the "hash" part of the URL as commands. If you try to load that full URL with the hash part then it does seem to render in a background tab just fine in Chrome and Firefox.

6 comments