1481398 - The page http://m.tmz.com/#!2018/08/06/mighty-ducks-goalie-shaun-weiss-arrested-mug-shot/ is entirely black while Tracking Protection Basic is enabled

Status: RESOLVED DUPLICATE of bug 1609867

(Web Compatibility :: Site Reports, defect, P3)

Description

[Oana Arbuzov [:oanaarbuzov]]

Attachment: Screenshot_4.png

[Environment:]
Browser / Version: Firefox Nightly 63.0a1 (2018-08-06)
Operating System: Windows 10 Pro

[Prerequisites:]
    1. Tracking Protection Basic enabled.
[Steps to Reproduce:]
    1. Navigate to http://m.tmz.com/#!2018/08/06/mighty-ducks-goalie-shaun-weiss-arrested-mug-shot/
    2. Observe the page
        
[Expected Behavior:]
The page’s content is loaded. 
 
[Actual Behavior:]
Page is black.

[Notes:]
1. Also reproducible on mobile.

Comment 1

[Oana Arbuzov [:oanaarbuzov]]

This is related to `tracking protection` breakage.

Looking at the devtools console, here are the blocked resources:
The resource at “http://tags.bkrtx.com/js/bk-coretag.js” was blocked because tracking protection is enabled.
The resource at “http://static.criteo.net/js/ld/publishertag.js” was blocked because tracking protection is enabled.
The resource at “http://ad.doubleclick.net/ddm/ad/gcwzow/pnvsrl/zlzxpqbgc/pl/;ord=1533627989734?” was blocked because tracking protection is enabled.

So there were domains to test:
- tags.bkrtx.com
- static.criteo.net
- ad.doubleclick.net

I opened the URL in a fresh browser profile (Firefox Nightly 63, uMatrix installed, normal mode) and loaded the page. The page is black.

I disabled the Spoof Referrer option in uMatrix and then WHITELISTED:
- tags.bkrtx.com 
- cdnapi.kaltura.com
and the page content loaded with the exception of the YouTube embedded video.

This part is related to `tpvideo` breakage (https://bugzilla.mozilla.org/showdependencytree.cgi?id=1400025&hide_resolved=1).

To make the video player be displayed and to play the video, I whitelisted: 
- googlevideos.com (and all related domains) 
- youtube.com (and all related domains)
 
The other resources (static.criteo.net, ad.doubleclick.net) didn't help. 

So in conclusion:
- bkrtx.com – Advertising = [tp-ads]
- kaltura.com - Content = [tp-content]
- youtube.com - Content = [tp-content]
- googlevideos.com - not listed in Blacklist or Google mapping, but shows as a Google Resource in Entitylist.

Comment 2

[Oana Arbuzov [:oanaarbuzov]]

Attachment: Screenshot_3.png

Added uMatrix results to displayed the page content.

Comment 3

[Oana Arbuzov [:oanaarbuzov]]

Attachment: Screenshot_7.png

Added uMatrix results to display the video player and play the video.

Comment 4

[Firefox Bug Husbandry Bot]

Migrating Webcompat whiteboard priorities to project flags. See bug 1547409.

Comment 5

[Firefox Bug Husbandry Bot]

See bug 1547409. Migrating whiteboard priority tags to program flags.

Comment 6

[Thomas Wisniewski [:twisniewski] [on PTO until Sep.9]]

Aside from instagram embedded videos not appearing in strict mode (just a link in their stead), the page seems to be working fine (including other videos). The instagram issue is bug 1609867, so I'll close this as a dupe.