1377002 - www.metrolyrics.com diaporama are broken with Tracking Protection

Status: RESOLVED DUPLICATE of bug 1226498

(Web Compatibility :: Privacy: Site Reports, defect, P3)

Description

[Julien Wajsberg [:julienw]]

Prerequisite: use tracking protection (for example, you can use private browsing to enable it)

    Navigate to: http://www.metrolyrics.com/news-gallery-artists-who-want-trump-to-stop-using-their-music.html

Expected Behavior:
There are arrows besides the image so that we can browse the various songs.

Actual Behavior:
No arrows, so we can't browse the content.

The error seems to be that a facebook js file (http://connect.facebook.net/en_US/all.js) is blocked, requirejs returns an error to the JS code, and then stops loading anything else.

Comment 1

[Julien Wajsberg [:julienw]]

Still happening.

Comment 2

[Rebecca Billings [:rbillings]]

Tested on 58.0a1 with TP enabled, verified arrows remain blocked on metrolyrics link.

Comment 3

[Julien Wajsberg [:julienw]]

Still happening for me.

Comment 4

[Sergiu Logigan [:sergiu]]

Attachment: Screen Capture 2.gif

I am unable to reproduce this issue on Windows 10 and Nightly 63, with basic or Strict Tracking Protection enabled.

Julien, do you still encounter the issue?

Comment 5

[Sergiu Logigan [:sergiu]]

Closing this as Worksforme.

Comment 6

[Julien Wajsberg [:julienw]]

I still see it in latest nightly, unfortunately...
I'm not sure what's different for you.

Comment 7

[Rebecca Billings [:rbillings]]

Mac 10.13 + Nightly 63 + Tracking protection [basic & strict] repros the issue - no arrows to navigate on the listed page http://www.metrolyrics.com/news-gallery-artists-who-want-trump-to-stop-using-their-music.html

Comment 8

[Sergiu Logigan [:sergiu]]

Looks like my machine finally came to its senses. It's reproducible on my side too.

This is related to `trackingprotection` breakage #1101005

Looking at the devtools console, here are the blocked resources:

The resource at “http://www.googletagmanager.com/gtm.js?id=GTM-6QP2” was blocked because content blocking is enabled.[Learn More] news-gallery-artists-who-want-trump-to-stop-using-their-music.html
The resource at “http://c.evidon.com/sitenotice/425/metrolyrics/settings.js” was blocked because content blocking is enabled.[Learn More] news-gallery-artists-who-want-trump-to-stop-using-their-music.html
The resource at “http://b.scorecardresearch.com/b?c1=2&c2=17672685&c4=metrolyrics&ns__t=1534924218716&ns_c=UTF-8&c8=8%20Songs%20Donald%20Trump%20Tried%20To%20Ruin%20For%20You%20And%20The%20Bands%20That%20Tried%20To%20Stop%20Him%20%7C%20MetroLyrics&c7=http%3A%2F%2Fwww.metrolyrics.com%2Fnews-gallery-artists-who-want-trump-to-stop-using-their-music.html&c9=” was blocked because content blocking is enabled.[Learn More] news-gallery-artists-who-want-trump-to-stop-using-their-music.html
The resource at “http://connect.facebook.net/en_US/all.js” was blocked because content blocking is enabled.[Learn More] news-gallery-artists-who-want-trump-to-stop-using-their-music.html
The resource at “http://fast.cbsi.demdex.net/dest5.html?d_nsid=0#http%3A%2F%2Fwww.metrolyrics.com%2Fnews-gallery-artists-who-want-trump-to-stop-using-their-music.html” was blocked because content blocking is enabled.[Learn More] news-gallery-artists-who-want-trump-to-stop-using-their-music.html
The resource at “http://secure-us.imrworldwide.com/v60.js” was blocked because content blocking is enabled.[Learn More] news-gallery-artists-who-want-trump-to-stop-using-their-music.html
The resource at “http://js.agkn.com/prod/v0/tag.js” was blocked because content blocking is enabled.[Learn More] news-gallery-artists-who-want-trump-to-stop-using-their-music.html

So these are the domains to test:
www.googletagmanager.com
c.evidon.com
b.scorecardresearch.com
connect.facebook.net
fast.cbsi.demdex.net
secure-us.imrworldwide.com
js.agkn.com

I opened the URL in a fresh browser profile (Firefox Nightly 63, uMatrix installed, normal mode) and loaded the page. No "Next" button was displayed on the slideshow.

I disabled the Spoof Referrer option in uMatrix and then *WHITELISTED*:

-facebook.net
-ajax.googleapis.com

After this, Next button was displayed and functional.
The other resources didn't help.

http://prntscr.com/kljqmk

facebook.net can be found in the disconnect-blacklist.json, disconnect-entitylist.json and disconnect_mapping.py.
googleapis.com can be found in the disconnect-blacklist.json and disconnect-entitylist.json

So in conclusion:

facebook.net - Social = [tp-social]
ajax.googleapis.com - Content = [tp-content]

Comment 9

[Youssef]

How did you know that "connect.facebook.net" is the cause?
Thank you

Prerequisite: use tracking protection (for example, you can use private
browsing to enable it)

Navigate to:

http://www.metrolyrics.com/news-gallery-artists-who-want-trump-to-stop-using-
their-music.html

Expected Behavior:
There are arrows besides the image so that we can browse the various songs.

Actual Behavior:
No arrows, so we can't browse the content.

The error seems to be that a facebook js file
(http://connect.facebook.net/en_US/all.js) is blocked, requirejs returns an
error to the JS code, and then stops loading anything else.

Comment 10

[Thomas Wisniewski [:twisniewski]]

The image gallery arrows are indeed un-broken if I shim the Facebook SDK all.js as suggested in bug 1226498, so this is a dupe of that bug.