1319767 - Unable to login on imgur using Google+ on Fx with FPI

Status: NEW

(Core :: DOM: Security, defect, P3)

Description

[Bogdan Maris [:bogdan_maris], Release Desktop QA]

Attachment: Screencast showing the issue

[Note]:
- Prerequisites:
Enable perf "privacy.firstparty.isolate"
Disable perf "network.predictor.enabled"
Disable perf "network.predictor.enable-prefetch"

[Affected versions]:
- latest Nightly 53.0a1

[Affected platforms]:
- Ubuntu 16.04 32bit

[Steps to reproduce]:
1. Visit imgur.com
2. Click sign-in
3. Select G+ social network
4. Enter credentials and complete the login process displayed in the new opened pop-up

[Expected result]:
- Fx successfully completes the login process using Facebook.

[Actual result]:
- After login a blank page is displayed in the new opened pop-up and the log-in using Facebook social network is a success.

[Regression range]:
- This is not a regression, It's still an experimental feature not enabled by default in any official build.

[Additional notes]:
- Screencast attached showing the issue.
- If the attachment does not work from some reason, here is a dropbox link with the same video: https://dl.dropboxusercontent.com/u/109148197/First%20Party%20Isolation/google%20plus%20imgur.mp4

Comment 1

[Bogdan Maris [:bogdan_maris], Release Desktop QA]

[Additional notes]:
- I should have mentioned that I did not encounter the same issue on Tor Browser.

Comment 2

[Tim Huang[:timhuang]]

The problem here is also the same as what I mentioned in Bug 1319773 comment 6. The google window tries to access the imgur window through window.opener, but they have different first party domains. So, the google window cannot access certain resources, maybe the resources in the google's iframe, in the imgur window.

Comment 3

[Julien Cristau [:jcristau]]

Mass wontfix for bugs affecting firefox 52.

Comment 4

[Ioana Chiorean]

Reproducing on Fennec 55 Beta 5 with FPI on and without.

Comment 5

[Emma Humphries ☕️🎸🧞‍♀️✨ (she/they) [:emceeaich] (Pacific Time) use needinfo]

This is an assigned P1 bug without activity in two weeks. 

If you intend to continue working on this bug for the current release/iteration/sprint, remove the 'stale-bug' keyword.

Otherwise we'll reset the priority of the bug back to '--' on Monday, August 28th.

Comment 6

[Ethan Tseng [:ethan]]

We would like to continue working on this bug.
But this is not urgent.  We can lower its priority.