1301443 - [Tracking Protection] Can't dereference link in: https://threatpost.com/google-releases-open-source-xss-web-app-scanner/109445/

Status: RESOLVED WORKSFORME

(Web Compatibility :: Site Reports, defect)

Description

[Eric Rescorla (:ekr)]

Attachment: Screen Shot 2016-09-08 at 9.42.35 AM.png

See the link that talks about Github (attached picture).

Clicking on this link doesn't work in nightly but does work in Chrome

Comment 1

[Michelle Funches - QA]

Hi Eric, Am I access the correct site?
I can access the site and associated links for (http://public-firing-range.appspot.com)
 http://public-firing-range.appspot.com/vulnerablelibraries/jquery.html

Comment 2

[Michelle Funches - QA]

Attachment: GithubLinkAccessible.JPG

Github Link Accessible

Version 	51.0a1
Build ID 	20160913030425
User Agent 	Mozilla/5.0 (Windows NT 10.0; WOW64; rv:51.0) Gecko/20100101 Firefox/51.0

Comment 3

[Andrew Overholt [:overholt]]

I can't click on any links on that page. Mike, you're my go-to "something is wrong on the Web" person; do you have any idea why clicking on links (in the text) on https://threatpost.com/google-releases-open-source-xss-web-app-scanner/109445/ doesn't navigate?

(Michelle, thanks for verifying. The issue Eric is reporting here isn't that the target of the link is navigable but that clicking on a link to it in this particular page doesn't work as expected.)

Comment 4

[Andrew Overholt [:overholt]]

Oops, looks like it's Tracking Protection-related. I reported it at https://disconnect.me/trackerprotection.

Comment 5

[Mike Taylor [:miketaylr]]

Classic TP.

Comment 6

[Parker]

I don't get the notification that tracking protection is on, yet the site won't load for me. I tried going to this threatpost article: https://t.co/itwPWamxgJ but the page is blank

firefox 53a1 (2016-11-19)(64-bit)

Comment 7

[u554753]

I can't reproduce the issue with the following specs: 
Mozilla/5.0 (Windows NT 10.0; WOW64; rv:53.0) Gecko/20100101 Firefox/53.0

All of the links in the text on page https://threatpost.com/google-releases-open-source-xss-web-app-scanner/109445/ are working as expected.

Comment 8

[Rebecca Billings [:rbillings]]

Tested on 58.0a1 with TP enabled. Verified links in nav bar, breadcrumbs, footer and R column function - but the links within the article do not navigate out. However, the web console does not show that TP is blocking any resources on the page.

https://threatpost.com/google-releases-open-source-xss-web-app-scanner/109445/

Comment 9

[Sergiu Logigan [:sergiu]]

I am unable to reproduce the issue on Windows 10 and Nightly 63, using Strict Tracking Protection.
I think this was somehow fixed.