IndexedDB API missing for Indico Check-In

EISSeuropa · March 31, 2024, 11:57pm

I might have missed it, but I have not seen this error reported elsewhere.
The Indico Check-In page gives the following error message:

IndexedDB API missing. Please visit Dexie.MissingAPIError

ThiefMaster · March 31, 2024, 11:58pm

Do you mean on https://checkin.getindico.io/? From which system/browser are you accessing it?

EISSeuropa · April 1, 2024, 4:48am

Yes, but I am tired and did not realise I had Lockdown Mode enabled by default on this Safari build. So this is to be expected.

The page works as intended when Lockdown is disabled (system-wise or specifically for that website). Maybe a very edge-case but might be worth mentioning for infosec conferences.

ThiefMaster · April 1, 2024, 9:05am

could you open an issue in the indico/indico-checkin-pwa GitHub repo?

EISSeuropa · April 1, 2024, 6:04pm

Done:

github.com/indico/indico-checkin-pwa

Lockdown Mode on Apple devices blocks access to the DB API

opened 06:03PM - 01 Apr 24 UTC

EISSeuropa

When accessing the web page from an iOS or MacOS device on [Lockdown Mode](https…://support.apple.com/en-us/105120), the following error displays: > IndexedDB API missing. Please visit Dexie.MissingAPIError This is to be expected, considering it's the purpose of Lockdown to prevent unwanted code execution and file access. Disabling Lockdown either system-wide or for that website exclusively allows the page to work again. Tested on iOS 17.1 and MacOS 14.4.1, with both Safari (19618.1.15.11.14) and Safari Tech Preview Release 191 (Safari 17.4, WebKit 19619.1.6.3). Impact: High (webpage unusable under these circumstances), Likelihood: Low (Lockdown Mode is an extreme security measure mostly used by the infosec community and potential target profiles only) Overall severity: Minor (can easily be circumvented by disabling Lockdown) Action recommended: Document the issue and make not having Lockdown Mode activated a requirement for using the pwa.