1486756 - Layout is broken on buy.guildwars2.com while Tracking Protection Basic is enabled

Status: RESOLVED FIXED

(Core :: Privacy: Anti-Tracking, defect, P3)

Description

[Oana Arbuzov [:oanaarbuzov]]

Attachment: BrokenLayout.png

[Environment:]
Browser / Version: Firefox Nightly 63.0a1 (2018-08-27)
Operating System: Windows 10 Pro

[Prerequisites:]
    1. Tracking Protection Basic enabled.
[Steps to Reproduce:]
    1. Navigate to https://buy.guildwars2.com/store?Action=html&Locale=en_IE&SiteID=gw2&cid=104%3A5%3A%3A%3A%3AGlobal%3A289%3A%3A%3A&pbPage=pathoffire&themeID=4785548100 
    2. Observe the page.
        
[Expected Behavior:]
Layout is correctly displayed.
 
[Actual Behavior:]
Layout is broken (images, css).

[Notes:]
Also reproducible after signing into the account and navigating to 
URL: https://buy.guildwars2.com/store?Action=DisplayPage&Locale=en_IE&SiteID=gw2&id=QuickBuyCartPage

Comment 1

[Oana Arbuzov [:oanaarbuzov]]

Attachment: BrokenLayout_AfterSignIN.png

Added broken layout after sign in.

Comment 2

[Oana Arbuzov [:oanaarbuzov]]

The issue is related to `trackingprotection` breakage.

Looking at the devtools console, here are the blocked resources:
The resource at “https://drh.img.digitalriver.com/DRHM/Storefront/Site/gw2/cm/multimedia/css/reset-min.css” was blocked because content blocking is enabled.
The resource at “https://drh1.img.digitalriver.com/DRHM/Storefront/Site/gw2/cm/multimedia/js/qtip2/jquery.qtip.min.js?a” was blocked because content blocking is enabled.
The resource at “https://www.googletagmanager.com/gtm.js?id=GTM-KV7FT5” was blocked because content blocking is enabled.

So below are the domains to test:
- drh.img.digitalriver.com
- drh1.img.digitalriver.com
- www.googletagmanager.com

I opened the URL in a fresh browser profile (Firefox Nightly 63, uMatrix installed, normal mode) and loaded the page. The page layout is broken.

I disabled the Spoof Referrer option in uMatrix and then WHITELISTED:
- digitalriver.com (including all related domains)
and layout is displayed correctly.

The other resource (www.googletagmanager.com) didn't help. 

So in conclusion:
- digitalriver.com is in Advertising category = [tp-ads]

Comment 3

[Oana Arbuzov [:oanaarbuzov]]

Attachment: uMatrixResults.png

Added uMatrix results.

Comment 4

[Oana Arbuzov [:oanaarbuzov]]

Attachment: uMatrixResults_LoggedIn.png

Added uMatrix results after login.

Comment 5

[Firefox Bug Husbandry Bot]

Migrating Webcompat whiteboard priorities to project flags. See bug 1547409.

Comment 6

[Firefox Bug Husbandry Bot]

See bug 1547409. Migrating whiteboard priority tags to program flags.

Comment 7

[Thomas Wisniewski [:twisniewski]]

This is another instance of Digital River's CDN resources being blocked, similar to the situation discussed here: https://bugzilla.mozilla.org/show_bug.cgi?id=1483201#c5

Comment 9

[Oana Arbuzov [:oanaarbuzov]]

The issue is no longer reproducible with ETP - Standard, the layout is displayed correctly.
https://prnt.sc/x85lk3

Note: The issue still occurs with ETP - Strict.
https://prnt.sc/x85iy1

Tested with:
Browser / Version: Firefox Nightly 86.0a1 (2021-01-18)
Operating System: Windows 10 Pro

Comment 10

[Tim Huang[:timhuang]]

The layout of the website is displayed correctly with ETP Strict mode. Close this for now. Feel free to reopen if the issue happens again.