1376769 - [FirstPartyIsolation] With FPI, filling in forms, page elements start to respond when you tap below them

Status: RESOLVED WORKSFORME

(Core :: DOM: Security, defect)

Description

[Oana Horvath [:ohorvath]]

Attachment: spiegel-de header partially hidden - fpi on.png

Prerequisites:
Create the perf ""privacy.firstparty.isolate"" and enable it 
Disable the perf ""network.predictor.enabled""
Disable the perf ""network.predictor.enable-prefetch"" 
Disable the perf ""browser.safebrowsing.malware.enabled""
Disable the perf ""browser.safebrowsing.phishing.enabled"" 
Create the perf ""privacy.firstparty.isolate.restrict_opener_access"" and Enable it

Steps to reproduce:
1. Go to orange.fr, spiegel.de or cdiscount.com, navigate, place an order and start the registration process. The bug doesn't always happen right away.
2. While filling in forms observe how tapping in an empty field, or a button, doesn't respond.
3. Tap just below the object and see if it's responding.

Expected results:
Objects should stay in place and respond when tapping on them.

Actual results:
After some navigation, trying to place an order, login, filling in form with errors, the page is somehow scrolled up, hiding the headers completly/partialy and all elements (images, text fields, buttons etc) have to be tapped below them, in order to respond. 

notes: See the screenshots attached, noticing how the page headers are hidden.

Comment 1

[Oana Horvath [:ohorvath]]

Attachment: cdiscount-header hidden - fpi on.png

Comment 2

[Wesly Huang (EPM)]

Ethan, would you help check if this is something TPE SecEng team going to take? Thanks.

Comment 3

[Tom Ritter [:tjr] (OOTO until 4/30 at least)]

I'm really confused about how FPI would change how a page is interacted with. I could imagine it might change the layout, but what happens when you click an element? I'm understanding this report to say "The browser doesn't interpret my click correctly" - and I'm really confused about how FPI could affect that. Are we sure this only happens with FPI turned on?

Comment 4

[Ethan Tseng [:ethan]]

Cynthia, could you help to reproduce and verify this bug is caused by First Party Isolation, or it's a Fennec issue in general?

Comment 5

[Cynthia Tang [:cynthiatang]]

Hi Oana,
Could you please provide a video for this bug? Thank you.

Comment 6

[Oana Horvath [:ohorvath]]

@Cynthia, I've tried today to record this bug but I could not reproduce it. It usually happens after some consistent navigation, but today it didn't happen. I will try again these days and I'll post the recording as soon as I can. Thank you!

Comment 7

[Christoph Kerschbaumer [:ckerschb]]

Oana, were you able to reproduce the problem again? Otherwise I think we should/could close this bug - thanks.

Comment 8

[Oana Horvath [:ohorvath]]

No, haven't been able to reproduce this in multiple tries. I'll close the bug. Thank you!