1502573 - Tracking Protection doesn't prevent connection to tracking service

Status: NEW

(Core :: Privacy: Anti-Tracking, defect, P3)

Description

[Darkspirit]

Attachment: Screenshot_20181027_025404.png

Debian Testing

STR:
mozregression --launch 2018-10-26 --pref network.warnOnAboutNetworking:false security.OCSP.enabled:0 network.captive-portal-service.enabled:false browser.search.geoip.url:'' browser.aboutHomeSnippets.updateUrl:'' browser.search.geoSpecificDefaults.url:'' network.dns.disablePrefetch:true network.prefetch-next:false network.http.speculative-parallel-limit:0 privacy.trackingprotection.enabled:true -a https://bugzilla.mozilla.org/show_bug.cgi?id=1496662 -a about:networking

Actual: There is a connection to Google Analytics.

Expected: No connection as the request log says:
> The resource at “https://www.google-analytics.com/analytics.js” was blocked because content blocking is enabled.[Learn More]

Comment 1

[Darkspirit]

I noticed this problem in my main profile despite having uBlock Origin.

Comment 2

[François Marier [:francois]]

Did you visit a website owned by Google (e.g. Youtube or Google Search)?

We don't block google-analytics.com on Google's properties because we consider that first-party tracking in that case.

On the other hand, if you see google-analytics being loaded on a non-Google site, then that would be a bug.

Comment 3

[Darkspirit]

I ran https://mozilla.github.io/mozregression/install.html with above command. It opened BMO. Then I switched to the about:networking tab and made screenshots. It doesn't happen if I only load about:networking.

Comment 4

[François Marier [:francois]]

So what you're saying is that if we visit bugzilla.mozilla.org in a new profile with TP enabled, then bugzilla still manages to load Google Analytics?

Was bugzilla.mozilla.org the only URL that was loaded in that run?

Comment 5

[Darkspirit]

> So what you're saying is that if we visit bugzilla.mozilla.org in a new profile with TP enabled, then bugzilla still manages to load Google Analytics?

Yes. It looks like there is no succesful request (I don't know) because we get
> The resource at “https://www.google-analytics.com/analytics.js” was blocked because content blocking is enabled.[Learn More]
but a connection was established. As prefetching etc. is disabled, there shouldn't be even a connection.

Comment 6

[Darkspirit]

> Was bugzilla.mozilla.org the only URL that was loaded in that run?

Yes. Please just run the command from comment 0.

Comment 7

[François Marier [:francois]]

Ok thanks for the extra details.

Let's see if that's still the case once bug 1207775 is fixed.

Comment 8

[Darkspirit]

Still reproducible.

mozregression --launch 2018-12-23 --pref network.warnOnAboutNetworking:false security.OCSP.enabled:0 network.captive-portal-service.enabled:false browser.search.geoip.url:'' browser.aboutHomeSnippets.updateUrl:'' browser.search.geoSpecificDefaults.url:'' network.dns.disablePrefetch:true network.prefetch-next:false network.http.speculative-parallel-limit:0 privacy.trackingprotection.enabled:true -a https://bugzilla.mozilla.org/show_bug.cgi?id=1496662 -a about:networking

When bug 1515144 gets deployed we need to use a different test website.

Comment 9

[(no longer active)]

To be clear, the likely fix for this is bug 1207775.