1449372 - form of mailchimp does not wok in private mode

Status: RESOLVED FIXED

(Firefox :: Protections UI, defect, P1)

Description

[susso0]

Attachment: landingpageofmailchimp.png

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0
Build ID: 20180323154952

Steps to reproduce:

1. Enter to this link (https://mailchi.mp/3593204a9bf4/proofforfirefoxbugzilla) in private mode

Note: It is a "lading page" made with mailchimp specifically to report this bug and anyone can do a landing page with this ("https://admin.mailchimp.com/jump/create-campaign/landing-page")



Actual results:

The part to enter your email (the form) will not appear (in Firefox 59 an 60 developer edition)


Expected results:

The form should appear as it does if you open firefox in "normal mode"

Comment 1

[laszlo.bialis]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0

Build ID: 20180401220058

Reproducible on Firefox Nightly 61.0a1 and Firefox Release 59.02/59.00 on Win10 x64.
Also reproducible on Ubuntu 16.04 x64 and MacOS 10.13.1 with the latest Nightly (61.0a1).

Comment 2

[Josh Matthews [:jdm]]

From the error console: "The resource at “https://admin.mailchimp.com/release/1.1.1f5ca10a26122cc8cc5f3c597737f61be7ebd27fd/js/dojo/dojo.js” was blocked because tracking protection is enabled."

Comment 3

[François Marier [:francois]]

mailchimp.com is indeed on the Disconnect list, under "Advertising": https://github.com/mozilla-services/shavar-prod-lists/blob/e969a342103ef081438028d76a6d01b0a3ccd039/disconnect-blacklist.json#L3414

It looks like mailchi.mp is also a domain owned by mailchimp.com:

  $ curl --head https://mailchi.mp
  HTTP/1.1 301 Moved Permanently
  Server: AkamaiGHost
  Content-Length: 0
  Location: https://mailchimp.com/
  Date: Thu, 05 Apr 2018 21:17:50 GMT
  Connection: keep-alive

though it's hard to know for sure since whois doesn't work:

  $ whois mailchi.mp
  This TLD has no whois server.

If the domain is indeed owned by the same organization, then we could add it to our entity list: https://github.com/mozilla-services/shavar-prod-lists/blob/e969a342103ef081438028d76a6d01b0a3ccd039/disconnect-entitylist.json#L4885-L4895

and that would this test page work.

susso0, is there evidence of MailChimp using the mailchi.mp publicly anywhere?

Comment 4

[susso0]

Hello, I entered this link to create a landing page "https://admin.mailchimp.com/jump/create-campaign/landing-page", and once I finished configuring it, I returned the link that I posted, is it This proves enough that mailchimp uses it?,I do not know at this time if in their "embedded" forms they use this domain, Would it be necessary to contact mailchimp?

Comment 5

[François Marier [:francois]]

Ok, if they're using it for campaign landing pages, then it's a pretty good sign they own that domain.

Let's add it to the entity list.

Comment 6

[François Marier [:francois]]

https://github.com/mozilla-services/shavar-prod-lists/pull/35

Comment 7

[[github robot]]

Commits pushed to master at https://github.com/mozilla-services/shavar-prod-lists

https://github.com/mozilla-services/shavar-prod-lists/commit/956bbab862e38ce3d2cf21c4cc87ca79b0cf53a3
Bug 1449372 - Add mailchi.mp as a MailChimp domain.

https://github.com/mozilla-services/shavar-prod-lists/commit/f16248d7f33367bb3c48d72fb32fdb239dbe0c8e
Merge pull request #35 from fmarier/mailchimp-1449372

Bug 1449372 - Add mailchi.mp as a MailChimp domain.

Comment 8

[François Marier [:francois]]

I can confirm that the test page from comment 0 works fine with the updated entity list.

Thanks for the report!

Comment 9

[susso0]

i AM HAPPY TO HELP :)