1492100 - Facebook comments area on tw.news.appledaily.com is not displayed while Tracking Protection Basic is enabled

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect, P3)

Description

[Oana Arbuzov [:oanaarbuzov]]

Attachment: Screenshot_4.png

[Environment:]
Browser / Version: Firefox Nightly 64.0a1 (2018-09-17) 
Operating System: Windows 10 Pro

[Prerequisites:]
    1. Tracking Protection Basic enabled.
[Steps to Reproduce:]
    1. Navigate to  https://tw.news.appledaily.com/local/realtime/20180916/1431132 
    2. Scroll down the page.
    3. Check for comments area.
        
[Expected Behavior::]
Facebook comments area is displayed.
 
[Actual Behavior::]
Facebook comments area is not displayed.

Comment 1

[Oana Arbuzov [:oanaarbuzov]]

The issue is related to `Comments` breakage.

Looking at the devtools console, here are the blocked resources:
The resource at “https://www.googletagmanager.com/gtm.js?id=GTM-W8R48TQ” was blocked because content blocking is enabled.
The resource at “https://www.googletagservices.com/tag/js/gpt.js” was blocked because content blocking is enabled.
The resource at “https://ib.adnxs.com/ut/v3/prebid” was blocked because content blocking is enabled.
The resource at “https://fastlane.rubiconproject.com/a/api/fastlane.json?account_id=18530&site_id=203154&zone_id=1001604&size_id=57&p_pos=unknown&rf=https%3A%2F%2Ftw.news.appledaily.com%2Flocal%2Frealtime%2F20180916%2F1431132&tk_flint=pbjs_lite_v1.15.0&x_source.tid=199e4e32-6e68-49eb-8aee-e9cc2a591cf1&p_screen_res=1920x1080&rp_floor=0.01&rp_secure=1&slots=1&rand=0.18525684017573552” was blocked because content blocking is enabled.
The resource at “https://connect.facebook.net/en_US/fbevents.js” was blocked because content blocking is enabled.
The resource at “https://sb.scorecardresearch.com/beacon.js” was blocked because content blocking is enabled.
The resource at “https://pixel.rubiconproject.com/tap.php?v=15796&nid=2760&put=fec32e79-fc3f-4871-b03b-d558fee73f85&expires=30” was blocked because content blocking is enabled.

So below are the domains to test:
- www.googletagmanager.com
- www.googletagservices.com
- ib.adnxs.com
- fastlane.rubiconproject.com
- connect.facebook.net
- sb.scorecardresearch.com
- pixel.rubiconproject.com

I opened the URL in a fresh browser profile (Firefox Nightly 64, uMatrix installed, normal mode) and loaded the page. The Facebook comments area is not displayed.

I disabled the Spoof Referrer option in uMatrix and then WHITELISTED:
- facebook.net (including all related domains)
- facebook.com (including all related domains and frames)
and Facebook comments area is loaded.

The daily articles section is still missing, so I WHITELISTED:
- fbcdn.net (including all related domains)
- appledaily.com.tw (including all related domains)
and the section are loaded.

The other resources didn't help. 

So in conclusion:
- facebook.com is in Disconnect list = [tp-social]
- appledaily.com.tw is not listed

Comment 2

[Oana Arbuzov [:oanaarbuzov]]

Attachment: uMatrixResults.png

Added uMatrix results.

Comment 3

[Firefox Bug Husbandry Bot]

Migrating Webcompat whiteboard priorities to project flags. See bug 1547409.

Comment 4

[Firefox Bug Husbandry Bot]

See bug 1547409. Migrating whiteboard priority tags to program flags.

Comment 5

[Thomas Wisniewski [:twisniewski]]

If I whitelist these resources, the comments show:

https://connect.facebook.net/zh_TW/sdk.js
https://www.facebook.com/tr/
https://www.facebook.com/v2.8/plugins/comments.php
https://www.facebook.com/v2.8/plugins/like_box.php
https://www.facebook.com/rsrc.php/
https://www.facebook.com/plugins/comments.php
https://www.facebook.com/plugins/feedback.php
https://scontent-yyz1-1.xx.fbcdn.net/v/

If sdk.js is blocked the none of them load. So we can shim sdk.js with a script which puts a placeholder on every .fb-comment, which the user can click to opt into allowing the real sdk.js and the above resources to load. This was easy enough to add to a shim for allowing FB logins, as suggested in bug 1226498.

Comment 6

[Oana Arbuzov [:oanaarbuzov]]

The issue no longer reproduces with ETP - Standard, Facebook comments load now.
https://prnt.sc/x7yn5p

Note: The issue still occurs with ETP - strict.

Tested with:
Browser / Version: Firefox Nightly 86.0a1 (2021-01-18)
Operating System: Windows 10 Pro