Closed Bug 1468957 Opened 6 years ago Closed 5 years ago

privacy.resistFingerprinting set to true breaks https://www.google.com/streetview/

Categories

(Core :: DOM: Security, defect, P2)

Product:
Core
Component:
DOM: Security
Version:
60 Branch
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1446472

People

(Reporter: herbert, Assigned: timhuang)

References

(Blocks 2 open bugs)

Details

(Whiteboard: [domsecurity-backlog1][fingerprinting][fp-triaged]) 

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:60.0) Gecko/20100101 Firefox/60.0
Build ID: 20100101

Steps to reproduce:

set privacy.resistFingerprinting set to true
navigate to https://www.google.com/streetview/


Actual results:

there are no images


Expected results:

images should be seen
Blocks: uplift_tor_fingerprinting
Status: UNCONFIRMED → NEW
Ever confirmed: true
Priority: -- → P3
Whiteboard: [domsecurity-backlog1]
Note: there is no prompt for canvas. If you set a site permission for "Extract Canvas Data"=Allow, and refresh the page, images will now show.
Whiteboard: [domsecurity-backlog1] → [domsecurity-backlog1][fingerprinting-breakage]
Blocks: fingerprinting-breakage
Whiteboard: [domsecurity-backlog1][fingerprinting-breakage] → [domsecurity-backlog1][fingerprinting]
Assignee: nobody → tihuang
Priority: P3 → P2
Whiteboard: [domsecurity-backlog1][fingerprinting] → [domsecurity-backlog1][fingerprinting][fp-triaged]
Canvas prompt is not properly shown on https://www.google.com/streetview/. But we don't know why yet.
This is a severe breakage issue. We need to investigate it soon.

According to comment 1, I think it happens because of canvas auto-blocking. So after Bug 1446472, there will show a canvas icon alongside the url bar, an identity block icon, if the canvas auto-blocking happens.

So people can grant the canvas permission through clicking the icon and make the website works again after refreshing the page.

Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.