1501211 - Design is broken on shop.sennheiser.com while Tracking Protection Strict is enabled

Status: RESOLVED INVALID

(Web Compatibility :: Site Reports, defect, P3)

Description

[Oana Arbuzov [:oanaarbuzov]]

Attachment: BrokenDesign.jpg

[Environment:]
Browser / Version: Firefox Nightly 64.0a1 (2018-10-22) 
Operating System: Windows 10 Pro

[Prerequisites:]
    1. Tracking Protection Basic enabled.
[Steps to Reproduce:]
    1. Navigate to  https://shop.sennheiser.com/store;jsessionid=10D1233DE57C36E1AC05A38A60574376?Action=DisplayPage&Locale=de_DE&SiteID=sennww&id=ThreePgCheckoutShoppingCartPage 
    2. Observe the page.
       
[Expected Behavior:]
Design is correctly displayed.
 
[Actual Behavior:]
Design is broken (CSS and images broken).

Comment 1

[Oana Arbuzov [:oanaarbuzov]]

The issue is related to `trackingprotection` breakage.

Looking at the devtools console, here are the blocked resources:
The resource at “https://drh.img.digitalriver.com/DRHM/Storefront/Site/sennww/cm/multimedia/redesign_css/bootstrap-3.3.7.min.css” was blocked because content blocking is enabled.
The resource at “https://drh1.img.digitalriver.com/DRHM/Storefront/SiteImplementation/sennww/sennwwSI/version/110/images/close_de_DE.gif” was blocked because content blocking is enabled.
The resource at “https://www.googleadservices.com/pagead/conversion.js” was blocked because content blocking is enabled.
The resource at “https://www.googletagmanager.com/gtm.js?id=GTM-56KT7R” was blocked because content blocking is enabled.

So below are the domains to test:
- ​drh.img.digitalriver.com
- drh1.img.digitalriver.com
- www.googleadservices.com
- www.googletagmanager.com

I opened the URL in a fresh browser profile (Firefox Nightly 64, uMatrix installed, normal mode) and loaded the page. The page layout is broken.

I disabled the Spoof Referrer option in uMatrix and then WHITELISTED:
- digitalriver.com (including all related domains)
and the page is correctly displayed.

The other resources didn't help. 

So in conclusion:
- digitalriver.com is in Advertising category = [tp-ads]

Comment 2

[Oana Arbuzov [:oanaarbuzov]]

Attachment: uMatrixResults.jpg

Adde uMatrix results.

Comment 3

[Leonard Ehrenfried]

Seems that the blocking of 

https://drh.img.digitalriver.com/DRHM/Storefront/Site/sennww/cm/multimedia/redesign_css/bootstrap-3.3.7.min.css

is incorrect and necessary for the functioning of the page.

Comment 4

[Thomas Wisniewski [:twisniewski]]

This is indeed another issue with Digital River's jQuery and other CDN assets being blocked, with the same situation as found here: https://bugzilla.mozilla.org/show_bug.cgi?id=1483201#c5

Comment 5

[Oana Arbuzov [:oanaarbuzov]]

The issue is not reproducible with ETP - Standard, but still occurs with ETP - Strict.
https://prnt.sc/xgfiza

Tested with:
Browser / Version: Firefox Nightly 86.0a1 (2021-01-21)
Operating System: Windows 10 Pro

I'll change the title to reflect The above.

Comment 6

[Oana Arbuzov [:oanaarbuzov]]

This is still an issue, with ETP-Strict the design is still broken.
https://prnt.sc/XHTred8rlJ3Z

Tested with:
Browser / Version: Firefox Nightly 102.0a1 (2022-05-18)
Operating System: Windows 10 Pro

Comment 7

[Raul Bucata]

The page can not be reached following the provided URL. Following https://en-us.sennheiser.com/, the page loads as expected. Closing this as INVALID, since the link has changed.