Closed Bug 1483217 Opened 6 years ago Closed 6 years ago

Embedded Facebook video is not displayed on semana.com while Tracking Protection Basic is enabled

Categories

(Web Compatibility :: Site Reports, defect, P3)

Firefox 62
x86_64
Windows 10
defect

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 1265457

People

(Reporter: oanaarbuzov, Unassigned)

References

(Blocks 1 open bug, )

Details

(Whiteboard: [platform-rel-Facebook][tp-content][tp-social] )

User Story

facebook.com

Attachments

(2 files)

[Environment:]
Browser / Version: Firefox Nightly 63.0a1 (2018-08-13)
Operating System: Windows 10 Pro

[Prerequisites:]
    1. Tracking Protection Basic enabled.
[Steps to Reproduce:]
    1. Navigate to http://www.semana.com/on-line/vida-moderna/multimedia/video-netflix-hombre-con-hombre-mujer-con-mujer/519144 
    2. Observe the page
        
[Expected Behavior:]
Video player is displayed and can be played.
 
[Actual Behavior:]
Video is not displayed.

[Note:]
Affected area:
<video muted="1" preload="metadata" style="" class="_ox1 _21y0" data-video-width="560" data-video-height="314" id="u_0_5" src="blob:https://www.facebook.com/b1b6a0ab-636c-44e0-a00f-9e643cde78c2" width="560" height="314"></video>
The issue is related to `tpvideo` breakage.

Looking at the devtools console, here are the blocked resources:
The resource at “https://tag.navdmp.com/tm35467.js” was blocked because tracking protection is enabled.
The resource at “https://static.chartbeat.com/js/chartbeat_mab.js” was blocked because tracking protection is enabled.
The resource at “https://cdn.cxense.com/cx.js” was blocked because tracking protection is enabled.
The resource at “https://www.googletagservices.com/tag/js/gpt.js” was blocked because tracking protection is enabled.
The resource at “https://www.googletagmanager.com/gtm.js?id=GTM-5N33L8” was blocked because tracking protection is enabled.
The resource at “https://www.google-analytics.com/analytics.js” was blocked because tracking protection is enabled.
The resource at “https://script.crazyegg.com/pages/scripts/0051/8661.js?426181” was blocked because tracking protection is enabled.
The resource at “https://www.facebook.com/plugins/video.php?href=https%3A%2F%2Fwww.facebook.com%2FNetflixLatino%2Fvideos%2F1655632824465152%2F&show_text=0&width=560” was blocked because tracking protection is enabled.
The resource at “https://sb.scorecardresearch.com/beacon.js” was blocked because tracking protection is enabled.
The resource at “https://scdn.cxense.com/cx.js” was blocked because tracking protection is enabled.
The resource at “https://www.googleadservices.com/pagead/conversion.js” was blocked because tracking protection is enabled.
The resource at “https://urls.api.twitter.com/1/urls/count.json?url=https://www.semana.com/vida-moderna/multimedia/video-netflix-hombre-con-hombre-mujer-con-mujer/519144&callback=jQuery211017152019695724285_1534254026920&_=1534254026921” was blocked because tracking protection is enabled.
The resource at “https://graph.facebook.com/?ids=https://www.semana.com/vida-moderna/multimedia/video-netflix-hombre-con-hombre-mujer-con-mujer/519144&callback=jQuery211017152019695724285_1534254026922&_=1534254026923” was blocked because tracking protection is enabled.
The resource at “https://www.linkedin.com/countserv/count/share?url=https://www.semana.com/vida-moderna/multimedia/video-netflix-hombre-con-hombre-mujer-con-mujer/519144&callback=jQuery211017152019695724285_1534254026924&format=jsonp&_=1534254026925” was blocked because tracking protection is enabled.
The resource at “https://connect.facebook.net/en_US/all.js” was blocked because tracking protection is enabled.
The resource at “https://platform.twitter.com/widgets.js” was blocked because tracking protection is enabled.
The resource at “https://static.chartbeat.com/js/chartbeat.js” was blocked because tracking protection is enabled.

So below are the domains to test:
- tag.navdmp.com
- static.chartbeat.com
- cdn.cxense.com
- www.googletagservices.com
- www.googletagmanager.com
- www.google-analytics.com
- script.crazyegg.com
- www.facebook.com
- sb.scorecardresearch.com
- scdn.cxense.com
- www.googleadservices.com
- urls.api.twitter.com
- graph.facebook.com
- www.linkedin.com
- www.linkedin.com
- connect.facebook.net
- platform.twitter.com
- static.chartbeat.com

I opened the URL in a fresh browser profile (Firefox Nightly 63, uMatrix installed, normal mode) and loaded the page. The video.

I disabled the Spoof Referrer option in uMatrix and then whitelisted facebook.com (including the frames). In this case the video player was displayed but the video did not play.
There was another domain that I had to whitelist fbcdn.net (including all related domains) and I could play the video.

The other resources didn't help.

So in conclusion:
- facebook.com is in the `Content` and `Disconnect` category => [tp-content] & [tp-social]
- fbcdn.net is in the `Content` category => [tp-content]
Attached image VideoBroken.png
Added screenshot with FB video broken.
Attached image uMatrixPlayVideo.png
Added uMatrix results.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → DUPLICATE
Product: Tech Evangelism → Web Compatibility
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: