1475542 - Images are broken on dites.bonjourmadame.fr with Tracking Protection Strict enabled

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect, P5)

Description

[Oana Arbuzov [:oanaarbuzov]]

[Environment:]
Browser / Version: Firefox Nightly 63.0a1 (2018-07-10)
Operating System: Samsung Galaxy S7 Edge (Android 7.0) - Resolution 1440 x 2560 pixels (~534 ppi pixel density), Windows 10 Pro

[Steps to Reproduce:]
    1. Navigate to http://dites.bonjourmadame.fr/
    2. Observe page.
        
[Expected Behavior:]
Images are displayed.
 
[Actual Behavior:]
Images are not displayed.

[Note:]
    1. Not reproducible with Tracking Protection basic.

Comment 1

[Oana Arbuzov [:oanaarbuzov]]

Looking at the devtools console, here are the blocked resources:
The resource at “http://assets.tumblr.com/assets/scripts/pre_tumblelog.js?_v=472beb185dc3d62d59bcf893499ebf45” was blocked because tracking protection is enabled.[Learn More] dites.bonjourmadame.fr 
The resource at “http://static.tumblr.com/4j1tuew/iMgmcbnna/foundation.css” was blocked because tracking protection is enabled.[Learn More] dites.bonjourmadame.fr 
The resource at “https://g.twimg.com/twitter-bird-16x16.png” was blocked because tracking protection is enabled.[Learn More] dites.bonjourmadame.fr 
The resource at “http://platform.twitter.com/widgets.js” was blocked because tracking protection is enabled.[Learn More] dites.bonjourmadame.fr 
The resource at “http://assets.pinterest.com/js/pinit.js” was blocked because tracking protection is enabled.[Learn More] dites.bonjourmadame.fr 
The resource at “https://78.media.tumblr.com/3bfd333d4758e3ce367b00f4683d24b7/tumblr_pbn8mzZByp1v1wvcuo1_1280.jpg” was blocked because tracking protection is enabled.[Learn More] dites.bonjourmadame.fr 
The resource at “https://68.media.tumblr.com/9f64a063a3b05589a99b6fff1dd87f83/tumblr_o6wzsiZO9m1v1wvcuo1_400.png” was blocked because tracking protection is enabled.[Learn More] dites.bonjourmadame.fr 
The resource at “http://www.tumblr.com/ask_form/c0smicray.tumblr.com” was blocked because tracking protection is enabled.[Learn More] dites.bonjourmadame.fr 
The resource at “http://www.google-analytics.com/ga.js” was blocked because tracking protection is enabled.[Learn More] dites.bonjourmadame.fr 
The resource at “http://connect.facebook.net/fr_FR/all.js#xfbml=1&appId=9423361013” was blocked because tracking protection is enabled.[Learn More] dites.bonjourmadame.fr 
The resource at “https://px.srvcs.tumblr.com/impixu?T=1531296670&J=eyJ0eXBlIjoicG9zdCIsInVybCI6Imh0dHA6Ly9kaXRlcy5ib25qb3VybWFkYW1lLmZyLyIsInJlcXR5cGUiOjAsInJvdXRlIjoiLyIsInBvc3RzIjpbeyJwb3N0aWQiOiIxNzU3NzI4MjE1NjgiLCJibG9naWQiOiIyNjc3NjM4MjkiLCJzb3VyY2UiOjMzfV19&U=GNCNKHLKAO&K=406bc4ce1c9ac43efbf21a261c53d788670aca4a75cf77e8358d79fe0541f156&R=” was blocked because tracking protection is enabled.[Learn More] dites.bonjourmadame.fr 

So the domains to test are:
- assets.tumblr.com
- static.tumblr.com
- www.tumblr.com
- px.srvcs.tumblr.com
- 78.media.tumblr.com
- 68.media.tumblr.com
- g.twimg.com
- platform.twitter.com
- assets.pinterest.com
- www.google-analytics.com
- connect.facebook.net

I opened the URL in a fresh browser profile (Firefox Nightly 63, uMatrix installed, normal mode) and loaded the page. The page is loaded and all images displayed.

I disabled the Spoof Referrer option in uMatrix and then blacklisted:
- assets.tumblr.com
- media.tumblr.com (which includes 78.media.tumblr.com and 68.media.tumblr.com)
- static.tumblr.com
- assets.pinterest.com
- g.twimg.com
and was able to reproduce the issue. 

The other resources (www.tumblr.com, px.srvcs.tumblr.com, platform.twitter.com, www.google-analytics.com, connect.facebook.net) didn't help. 

We can ignore the tp-content domains (tumblr.com and pinterest.com) since the breakage also occurs with the standard list.

So in conclusion:
- twimg.com - Disconnect = [tp-social]

Comment 2

[Oana Arbuzov [:oanaarbuzov]]

Attachment: 42562182-b65c0a20-8503-11e8-8fb4-bf4920e9b056.png

Added uMatrix results.

Comment 3

[Oana Arbuzov [:oanaarbuzov]]

Attachment: d1c6b0c0-36c7-4762-b42e-be235c88c214.jpg

Broken images.

Comment 4

[Thomas Wisniewski [:twisniewski]]

I see images on the page in strict mode now. Oana, can you confirm?

Comment 5

[Oana Arbuzov [:oanaarbuzov]]

Yes, I can confirm it works fine now - image is displayed both with Standard and Strict TP.

Tested with:
Browser / Version: Firefox Nightly 77.0a1 (2020-04-20)
Operating System: Windows 10 Pro