1501076 - Registration form is stuck in a loading loop at hootsuite.com with ETP set to STRICT

Status: NEW

(Core :: Privacy: Anti-Tracking, defect, P5)

Description

[Adam Stevenson [:adamopenweb]]

Attachment: bug.jpg

Reproduces on desktop and mobile.

Steps to reproduce:
0. Enable tracking protection basic list
1. Navigate to: https://hootsuite.com/pages/future-of-social/mexico-city
2. Click on "Regístrate ahora"

Expected behaviour:
Popup dialog appears to register

Actual behaviour:
Popup appears with spinner

Comment 1

[Oana Arbuzov [:oanaarbuzov]]

Layout has changed, but now the issue occurs for "Mira ahora" button, the form is not displayed with ETP - Strict. With ETP - Standard the form is displayed.
https://prnt.sc/xgeqq6

Tested with:
Browser / Version: Firefox Nightly 86.0a1 (2021-01-21), Firefox Nightly 210121 (🦎 86.0a1-20210120095121),
Operating System: Windows 10 Pro, Samsung Galaxy S8 (Android 9) - 1440 x 2960 pixels, 18.5:9 ratio (~570 ppi density)

I'll change the title based on the above.

Comment 2

[Raul Bucata]

The provided URL contains a part of the page that is no longer available. But I was able to reproduce the issue following this URL: https://www.hootsuite.com/webinars/trends-in-action-create-social-shopping-experiences-customers-love. The registration form is stuck in a loading loop with ETP set to STANDARD. With ETP set to OFF, the form loads:

https://prnt.sc/eKzoLRT9Cfrp

Based on the above-mentioned findings, I will be moving this to the relevant Product and Component

Tested with:

Browser / Version: Firefox Nightly 101.0a1 (2022-04-27) (64-bit)
Operating System: Windows 10 PRO x64

Comment 3

[Thomas Wisniewski [:twisniewski]]

The form in the URL in comment #2 loads for me after a few seconds in standard mode, but is broken in strict mode because the form in question is hosted via Marketo, which is blocked in strict mode (if I allow requests to https://app-sj13.marketo.com then it works).

Since the form is actually hosted on Marketo's servers, our only real option here would be some sort of opt-in/yellowlisting/proxying approach.