1477247 - Unable to play video on nfl.com while Tracking Protection Strict is enabled

Status: RESOLVED DUPLICATE of bug 1163725

(Web Compatibility :: Site Reports, defect, P3)

Description

[Oana Arbuzov [:oanaarbuzov]]

[Environment:]
Browser / Version: Firefox Nightly 63.0a1 (2018-07-18)
Operating System: Windows 10 Pro

[Prerequisites:]
    1. Tracking Protection Strict enabled.
[Steps to Reproduce:]
    1. Navigate to https://www.nfl.com/videos/highlights
    2. Observe the video.
        
[Expected Behavior:]
Video does plays.
 
[Actual Behavior:]
Video does not play.

[Note:]
    1. Not reproducible with Tracking Protection Basic.

Comment 1

[Oana Arbuzov [:oanaarbuzov]]

This is related to "video" breakage and it is reproducible with TP Strict only.

Looking at the devtools console, here are the blocked resources:
The resource at “https://cdns.gigya.com/js/gigya.js?apiKey=3_JuHa5qkVIfY_KsNk1TuudSQT5Nif4axD-QXug1OgBmAgVieKA56umYvWPnoursaC” was blocked because tracking protection is enabled.
The resource at “https://adservice.google.ro/adsid/integrator.js?domain=www.nfl.com” was blocked because tracking protection is enabled.
The resource at “https://dpm.demdex.net/id?d_visid_ver=2.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=F75C3025512D2C1D0A490D44%40AdobeOrg&d_nsid=0&d_mid=84622709431776132236619427398525748897&d_blob=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&d_cid_ic=AVID%012DA8DE4E053118E0-60000110C00000F2&ts=1532091032659” was blocked because tracking protection is enabled.
The resource at “https://srv-2018-07-20-12.config.parsely.com/config/nfl.com” was blocked because tracking protection is enabled.
The resource at “https://www.facebook.com/tr?id=265163127283621&ev=PageView” was blocked because tracking protection is enabled.
The resource at “https://sb.scorecardresearch.com/r?c2=3005386&d.c=gif&d.o=cbsnfl&d.x=64222430&d.t=page&d.u=https%3A%2F%2Fwww.nfl.com%2Fvideos%2Fhighlights” was blocked because tracking protection is enabled.
The resource at “https://nfl.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.nfl.com%2Fvideos%2Fhighlights” was blocked because tracking protection is enabled.
The resource at “https://dpm.demdex.net/id?d_rtbd=json&d_ver=2&d_orgid=F75C3025512D2C1D0A490D44%40AdobeOrg&d_mid=84622709431776132236619427398525748897&d_blob=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&d_cid_ic=AVID%012DA8DE4E053118E0-60000110C00000F2&d_cb=s_c_il%5B0%5D._setAudienceManagerFields” was blocked because tracking protection is enabled.
The resource at “https://nfl.hb.omtrdc.net/settings/f75c3025512d2c1d0a490d44-adobeorg.xml?r=1532091035051” was blocked because tracking protection is enabled.
The resource at “https://nflent-vh.akamaihd.net/i/films/vodzilla/138737/180719_AFFL_Championship_HL-20180719_192634648_,180k,320k,500k,700k,1200k,2000k,3200k,5000k,.mp4.csmil/master.m3u8” was blocked because tracking protection is enabled.
The resource at “https://pagead2.googlesyndication.com/pagead/gen_204?request_type=xfp&admob=f&lid=6&sdkv=h.3.221.0&id=ima_html5&c=1557648506899572&domain=www.nfl.com” was blocked because tracking protection is enabled.
The resource at “https://pubads.g.doubleclick.net/gampad/ads?sz=640x360&iu=%2F4595%2Fnfl.video%2Fvideos%2Fhighlights&ciu_szs&gdfp_req=1&env=vp&output=xml_vast3&unviewed_position_start=1&url=https%3A%2F%2Fwww.nfl.com%2Fvideos%2Fhighlights&description_url=https%3A%2F%2Fwww.nfl.com&correlator=1330623216391873&cust_params=s1%3D%2Fvideos%2Fhighlights%26s2%3D%26slot%3Dvideo%26test%3D&sdkv=h.3.221.0&sdki=3c0d&scor=3313977787725512&adk=1367367839&u_so=l&osd=2&frm=0&sdr=1&is_amp=0&adsid=NT&vpa=auto&vpmute=1&afvsz=200x200%2C250x250%2C300x250%2C336x280%2C450x50%2C468x60%2C480x70%2C728x90&ged=ve4_td2_tt1_pd2_la2000_er250.300.400.600_vi0.0.966.1903_vp100_eb24299” was blocked because tracking protection is enabled.
The resource at “https://pagead2.googlesyndication.com/pagead/gen_204?rt=xfp&lid=17&sdkv=h.3.221.0&id=ima_html5&c=1557648506899572&domain=www.nfl.com” was blocked because tracking protection is enabled.
The resource at “https://csi.gstatic.com/csi?v=2&s=ima&puid=1~jjtzg15w&c=8550722911507&alt=0&sdkv=h.3.221.0&pid=4595&mrd=4&aab=1&itv=1&aec=1012&rcid=goog_1497628622&met.4=er.ah” was blocked because tracking protection is enabled.

So there were domains to test:
- cdns.gigya.com
- csi.gstatic.com
- adservice.google.ro
- dpm.demdex.net
- srv-2018-07-20-12.config.parsely.com
- www.facebook.com
- sb.scorecardresearch.com
- nfl.demdex.net
- dpm.demdex.net
- nfl.hb.omtrdc.net
- nflent-vh.akamaihd.net
- pagead2.googlesyndication.com
- pubads.g.doubleclick.net

I opened the URL in a fresh browser profile (Firefox Nightly 63, uMatrix installed, normal mode) and loaded the page. The video is displayed but does not play.
nfl.com is already whitelisted.

I disabled the Spoof Referrer option in uMatrix and then WHITELISTED anvato.net and ahamaihd.net(including all related domains). In this case the video plays.

The other resources and combination didn't help. 

[So in conclusion:]
- akamaihd.net is in the `Content` category [tp-content]
- anvato.net is not listed in Blacklist/Entitylist

Comment 3

[Oana Arbuzov [:oanaarbuzov]]

Attachment: uMatrixResulsVideoPlay.png

Added uMatrix results.

Comment 4

[Oana Arbuzov [:oanaarbuzov]]

Attachment: Video_TPStrict.png

Added screenshot with video being blocked with TP strict.