1485662 - Design is broken on atticpartyanimals.com while Tracking Protection Basic is enabled

Status: RESOLVED WORKSFORME

(Web Compatibility :: Site Reports, defect, P3)

Description

[Oana Arbuzov [:oanaarbuzov]]

[Environment:]
Browser / Version: Firefox Nightly 63.0a1 (2018-08-22)
Operating System: Windows 10 Pro

[Prerequisites:]
    1. Tracking Protection Basic enabled.
[Steps to Reproduce:]
    1. Navigate to http://www.atticpartyanimals.com/ 
    2. Observe the page.
        
[Expected Behavior:]
The page content is displayed correctly (images  and css)
 
[Actual Behavior:]
Design is broken (no images and css)

Comment 1

[Oana Arbuzov [:oanaarbuzov]]

Attachment: Brokendesign.png

Added screenshot with broken design.

Comment 2

[Oana Arbuzov [:oanaarbuzov]]

The issue is related to `trackingprotection` breakage.

Looking at the devtools console, here are the blocked resources:
The resource at “http://static.sites.yp.com/css/widgets/concat_widget.min.css?v=6.5.1.37806” was blocked because content blocking is enabled.
The resource at “http://connect.facebook.net/en_US/sdk.js” was blocked because content blocking is enabled.
The resource at “http://www.google-analytics.com/analytics.js” was blocked because content blocking is enabled.
The resource at “https://s7.addthis.com/js/250/addthis_widget.js” was blocked because content blocking is enabled.
The resource at “http://sites.yp.com/templates/creator/m_2/2d/2d2/2305/assets/copyright.js” was blocked because content blocking is enabled.
The resource at “https://20587159p.rfihub.com/ca.gif?rb=11869&ca=20587159&ra=2018-08-23%2016:29:31&pgroup=222&cat=Pest%20Control%20Services&custid=1508547595&pubid=&pid=&ptype=&t=” was blocked because content blocking is enabled.

So below are the domains to test:
- static.sites.yp.com
- connect.facebook.net
- www.google-analytics.com
- s7.addthis.com
- sites.yp.com
- 20587159p.rfihub.com

I opened the URL in a fresh browser profile (Firefox Nightly 63, uMatrix installed, normal mode) and loaded the page. The design is broken.

I disabled the Spoof Referrer option in uMatrix and then WHITELISTED:
- yp.com (including all related domains)
- ajax.googleapis.com
and the page loads the content correctly with the exception of the video and the embedded Facebook overlay.

I whitelisted:
- facebook.com (including all related domains)
- facebook.net (including all related domains)
- fbcdn.net (including all related domains)
and the embedded Facebook overlay is displayed.

For the video to play I whitelisted:
- ypcdn.com

The other resources didn't help. 

So in conclusion:
- yp.com is in Advertising category = [tp-ads]
- googleapis.com is in Content category = [tp-content]
- facebook.com is in Disconnect category = [tp-social]
- ypcdn.com not listed

Comment 3

[Oana Arbuzov [:oanaarbuzov]]

Attachment: uMatrixResults.png

Added uMatrix results.

Comment 4

[Thomas Wisniewski [:twisniewski]]

The page seems to be working fine now even in strict mode.