1510288 - Unable to create an account on www.directvnow.com while Tracking Protection Basic is enabled

Status: RESOLVED INVALID

(Web Compatibility :: Site Reports, defect, P3)

Description

[Oana Arbuzov [:oanaarbuzov]]

Attachment: FieldsDisabled.jpg

[Environment:]
Browser / Version: Firefox Nightly 65.0a1 (2018-11-25) 
Operating System: Windows 10 Pro

[Prerequisites:]
    1. Tracking Protection Basic enabled (Custom > Tracker in all windows > Basic Block List).
[Steps to Reproduce:]
    1. Navigate to https://www.directvnow.com/accounts/my-account 
    2. Type in the username field.
    3. Observe the rest of the form.
       
[Expected Behavior:]
Fields are enabled and Captcha image is displayed. Account can be created.
 
[Actual Behavior:]
Fields are disabled and Captcha image is not displayed.

Comment 1

[Oana Arbuzov [:oanaarbuzov]]

[Update:]
[Steps to Reproduce:]
    1. Navigate to https://www.directvnow.com/accounts/select-plan.
    2. Scroll down the page and click "Continue with Live a Little".
    3. Scroll down the page and click "Skip for now".
    4. Click "Create Account".
    2. Type in the username field.
    3. Observe the rest of the form.

The issue is related to `Tracking Protection` breakage.

Looking at the devtools console, here are the blocked resources:
The resource at “https://www.att.com/scripts/adobe/prod/dataMappingFramework.min.js” was blocked because content blocking is enabled.
The resource at “https://www.google-analytics.com/analytics.js” was blocked because content blocking is enabled.
The resource at “https://s.go-mpulse.net/boomerang/2NC8D-QMFKE-XJWQV-5VX88-JW85T” was blocked because content blocking is enabled.
The resource at “https://m.att.com/best/resources/unauth/registration/token/validateFrictionlessToken?apiKey=qwerty” was blocked because content blocking is enabled.
The resource at “https://js-agent.newrelic.com/nr-spa-1071.min.js” was blocked because content blocking is enabled.

So below are the domains to test:
- www.att.com
- m.att.com
- js-agent.newrelic.com
- www.google-analytics.com
- s.go-mpulse.net

I opened the URL in a fresh browser profile (Firefox Nightly 65, uMatrix installed, normal mode) and loaded the page. The rest of the form is disabled.

I disabled the Spoof Referrer option in uMatrix and then WHITELISTED:
- att.com (including all related domains)
and the rest of the form becomes available and Captcha image is displayed.

The other resources didn't help. 

So in conclusion:
- att.com is in Advertising category = [tp-ads]

Comment 2

[Oana Arbuzov [:oanaarbuzov]]

Attachment: uMatrxiResults.jpg

Added uMatrix results.

Comment 3

[Thomas Wisniewski [:twisniewski]]

Their seems utterly broken. When I visit any link to https://www.directvnow.com I'm redirected to the same URL on https://www.atttvnow.com/ and get a message like this:

Access Denied
You don't have permission to access "http://www.atttvnow.com/accounts/select-plan" on this server.

Reference #(unique ID)

Closing as invalid.