Open Bug 1468195 Opened 5 years ago Updated 6 months ago

Getting web push notification requests even after blocking new requests

Categories

(Core :: DOM: Push Notifications, defect, P3)

Product:
Core
Component:
DOM: Push Notifications
Version:
60 Branch
Platform:
Unspecified
macOS
Type:
defect

Tracking

()

Tracking Flags:
Tracking Status
firefox60 --- affected
firefox61 --- affected
firefox62 --- affected

People

(Reporter: bad.and.ugly, Unassigned)

Details

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:60.0) Gecko/20100101 Firefox/60.0
Build ID: 20180605171542

Steps to reproduce:

I went to Preferences. Privacy & Security. Permissions. Notifications. Settings. I blocked new requests asking to allow notifications. I went to https://www.ettv.tv/torrent/american-gods-s01e03-proper-720p-hdtv-x264-batv-ettv--45791 (and many other websites)


Actual results:

The website (https://www.ettv.tv/torrent/american-gods-s01e03-proper-720p-hdtv-x264-batv-ettv--45791) wants to show me notifications, so Firefox asked me if I allow it.


Expected results:

I shouldn't get any new requests to allow notifications.
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:62.0) Gecko/20100101 Firefox/62.0 
Build ID:20180612100037      
I manage to reproduce this issue on Mac 10.13 with the latest FF 62.0a1.
Status: UNCONFIRMED → NEW
status-firefox60: --- → affected
status-firefox61: --- → affected
status-firefox62: --- → affected
Component: Untriaged → DOM: Push Notifications
Ever confirmed: true
OS: Unspecified → Mac OS X
Product: Firefox → Core
If you deny permissions the site is popping up a fake doorhanger that looks like the chrome UX.
Another offender: 

- Postimg.org 
- also known as postimg.cc

Despicable.
> Postimg.org

Sorry, I meant Postimage.org 

- using https://postimg.cc/

- also using https://postimages.org/ (images uploaded to this domain result in postimg.cc addresses).
Via e-mail: 

> We removed fake push notifications. Thanks for the report!
> 
> Best regards,
> Postimage support

Background (including some extension-related crashes): <https://new.reddit.com/r/firefox/comments/8sudxp>
I have another offender. Please: 

- should I use this bug to record current and future examples?
Let's see what Ehsan says.  This is a variant of page popups which he was working on tracking.
Flags: needinfo?(ehsan)
Ah, thank you 
… um, that was an incomplete thank you (Bugzilla silently discarded a thumbs-up U+1F44D and all text that followed). 

The penny drops, 

<https://github.com/ehsan/popup-reporter/issues/12#issuecomment-397897613>
I have the same setting turned on in my browser (I also hate these annoying push notification prompts!) and neither the site in comment 0 not the sites in comment 4 trigger anything for me.

I also didn't see an in-page version of those dialogs, although I think I've seen them before on some other websites.  We currently aren't planning to work on those specific types of pop-ups, since we don't have a ton of examples of those in our dataset, but if you have examples please report them using https://addons.mozilla.org/en-US/firefox/addon/in-page-pop-up-reporter/.  Thanks!
Flags: needinfo?(ehsan)
Priority: -- → P3
To clarify, please: is this bug for cases where 
permissions.default.desktop-notification set to 2 is 
_not_ effective?

I got what appeared to be a notification request at https://www.hindustantimes.com/india-news/crabs-caused-tiware-dam-breach-maharashtra-water-minister/story-FujgQcHml5q4cBftxQqnmK.html?fbclid=IwAR3y-oDJPrGMRlnhRX34yOWycW2_zUaLTZ9wYXnxyQb7oQcI9pcI4VnxA7s but it's not returning when I reload the page. I have installed in-page-popup-reporter and will use it if I can manage to reproduce the problem.

I have permissions.default.desktop-notification set to 2

Severity: normal → S3
You need to log in before you can comment on or make changes to this bug.