1494154 - Video doesn't play on zdnet.com with Tracking Protection basic enabled

Status: RESOLVED DUPLICATE of bug 1487373

(Web Compatibility :: Site Reports, defect, P3)

Description

[Adam Stevenson [:adamopenweb]]

Attachment: Screenshot_zdnet.png

[Environment:]
Browser / Version: Firefox Nightly 64
Operating System: Windows 10, MacOS 10.13.6

[Prerequisites:]
    1. Tracking Protection Basic enabled.
[Steps to Reproduce:]
    1. Navigate to: https://www.zdnet.com/article/symantec-internal-audit-result-uncovers-customer-transaction-recorded-as-revenue/
    2. Ensure auto-play is allowed
    3. Try to play the video

[Expected Behavior:]
Video should play
 
[Actual Behavior:]
Video doesn't play

Comment 1

[Adam Stevenson [:adamopenweb]]

Oana - could you or Sergiu diagnose this issue please?

It seems to be happening across the zdnet site.

Comment 2

[Oana Arbuzov [:oanaarbuzov]]

The issue is reproducible and it is related to `Video` breakage.

Looking at the devtools console, here are the blocked resources:
The resource at “https://c.evidon.com/sitenotice/evidon-sitenotice-tag.js” was blocked because content blocking is enabled.
The resource at “https://cdn.viglink.com/api/vglnk.js” was blocked because content blocking is enabled.
The resource at “https://asset.pagefair.com/measure.min.js?_=1537941941801” was blocked because content blocking is enabled.
The resource at “https://www.everestjs.net/static/st.v3.js” was blocked because content blocking is enabled.
The resource at “https://js.agkn.com/prod/v0/tag.js” was blocked because content blocking is enabled.
The resource at “https://cdn-gl.imrworldwide.com/conf/TF410621A-6337-4D08-955D-E14C11D5FFA5.js#name=nSdkInstance&ns=NOLBUNDLE” was blocked because content blocking is enabled.
The resource at “https://cbsi.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.zdnet.com%2Farticle%2Fsymantec-internal-audit-result-uncovers-customer-transaction-recorded-as-revenue%2F” was blocked because content blocking is enabled.
The resource at “https://dpm.demdex.net/ibs:dpid=22052&dpuuid=5978151438689722586&redir=” was blocked because content blocking is enabled.
The resource at “https://ib.adnxs.com/getuid?https://ml314.com/csync.ashx%3Ffp=$UID%26person_id=5978151438689722586%26eid=2” was blocked because content blocking is enabled.
The resource at “https://magnetic.t.domdex.com/sync/bombora?next=https%3A%2F%2Fml314.com/csync.ashx%3Ffp=$UID%26person_id=5978151438689722586%26eid=50117” was blocked because content blocking is enabled.
The resource at “https://cm.g.doubleclick.net/pixel?google_nid=eye&google_cm&google_sc&bid=gdo9o51&newuser=1” was blocked because content blocking is enabled.
The resource at “https://secure-us.imrworldwide.com/cgi-bin/m?ci=us-304254h&cg=0&cc=1&si=https%3A//www.zdnet.com/article/symantec-internal-audit-result-uncovers-customer-transaction-recorded-as-revenue/&rp=https%3A//bugzilla.mozilla.org/&ts=compact&rnd=1537941942316” was blocked because content blocking is enabled.
The resource at “https://sb.scorecardresearch.com/b?c1=2&c2=3005086&ns__t=1537941942325&ns_c=UTF-8&c8=Symantec%20accountancy%20audit%20uncovers%20customer%20transaction%20recorded%20as%20revenue%20%7C%20ZDNet&c7=https%3A%2F%2Fwww.zdnet.com%2Farticle%2Fsymantec-internal-audit-result-uncovers-customer-transaction-recorded-as-revenue%2F&c9=https%3A%2F%2Fbugzilla.mozilla.org%2F” was blocked because content blocking is enabled.
The resource at “https://connect.facebook.net/en_US/fbevents.js” was blocked because content blocking is enabled.

So below are the domains to test:
- ​c.evidon.com
- ​cdn.viglink.com
- ​asset.pagefair.com
- ​www.everestjs.net
- ​js.agkn.com
- ​cdn-gl.imrworldwide.com
- ​cbsi.demdex.net
- ​dpm.demdex.net
- ​ib.adnxs.com
- ​magnetic.t.domdex.com
- ​cm.g.doubleclick.net
- ​secure-us.imrworldwide.com
- ​sb.scorecardresearch.com
- ​connect.facebook.net

I opened the URL in a fresh browser profile (Firefox Nightly 64, uMatrix installed, normal mode) and loaded the page. The video doesn't play.

I disabled the Spoof Referrer option in uMatrix and then WHITELISTED:
- 2mdn.net(including all related domains)
- akamaized.net(including all related domains)
- cbsinteractive.com(including all related domains)
- cbsistatic.com(including all related domains)
- evidon.com (including all related domains)
- imasdk.googleapis.com (including frame)
and the parts diagram is loaded.

The other resources didn't help. 

So in conclusion:
- 2mdn.net is in Disconnect list in Advertising cateogy = [tp-ads]
- akamaized.net is not listed
- cbsinteractive.com is in Content category = [tp-content]
- cbsistatic.com is not listed
- evidon.com is in Advertising category = [tp-ads]
- googleapis.com is in Content category = [tp-content]

Comment 3

[Oana Arbuzov [:oanaarbuzov]]

Attachment: uMatrixResults.png

Added uMatrix results.