1515269 - Content is not loaded on buy.logitech.com while ETP is set to STRICT

Status: REOPENED

(Core :: Privacy: Anti-Tracking, defect, P3)

Description

[Ciprian Ciocan [:ciprian]]

Environment:
Operating system: Windows 10 Pro
Firefox version: Firefox Nightly 66.0a1 (2018-12-18) (64-bit)

Prerequisites:
Enable Basic Tracking Protection

Steps to reproduce:
1. Navigate to: https://buy.logitech.com/store?Action=DisplayEditProfilePage&Env=BASE&Locale=en_US&SiteID=logib2c
2. Observe the page layout.


Expected Behavior:
The  web page must be fully loaded.

Actual Behavior:
The logo from the header is missing. The layout is messed up.

Notes:
1. Screenshot link: http://prntscr.com/lwuvw3

Comment 1

[Ciprian Ciocan [:ciprian]]

This is related to `trackingprotection` breakage #1101005

Looking at the devtools console, here are the blocked resources:

The resource at “https://drh.img.digitalriver.com/DRHM/Storefront/Site/logib2c/cm/multimedia/css/bootstrap.min.css” was blocked because content blocking is enabled.[Learn More] store
The resource at “https://mboxedge26.tt.omtrdc.net/m2/logitech/mbox/json?mbox=target-global-mbox&mboxSession=a322f525968c4d0897c5a748897402df&mboxPC=a322f525968c4d0897c5a748897402df.26_32&mboxPage=d8412ddc54e14d9ea851f38189a08348&mboxRid=6468db0fa92048719fbba99f6baacd4e&mboxVersion=1.6.2&mboxCount=1&mboxTime=1545212074425&mboxHost=buy.logitech.com&mboxURL=https%3A%2F%2Fbuy.logitech.com%2Fstore%3FAction%3DDisplayEditProfilePage%26Env%3DBASE%26Locale%3Den_US%26SiteID%3Dlogib2c&mboxReferrer=&browserHeight=966&browserWidth=1420&browserTimeOffset=120&screenHeight=1080&screenWidth=1920&colorDepth=24&devicePixelRatio=1&screenOrientation=landscape&webGLRenderer=ANGLE%20(ATI%20Radeon%203000%20Graphics%20Direct3D11%20vs_4_0%20ps_4_0)&at_property=d045a57f-c8a7-5326-aff1-4f731da81ea8&mboxMCSDID=7B255BF38099AB50-50CA3E2462ADDC17&vst.trk=logitechlogitechglobal.112.2o7.net&vst.trks=logitechlogitechglobal.112.2o7.net&mboxMCGVID=21115105929955027740498115621889973271&mboxAAMB=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0
The resource at “https://www.google-analytics.com/analytics.js” was blocked because content blocking is enabled.[Learn More] store
The resource at “https://secure-ds.serving-sys.com/SemiCachedScripts/ebOneTag.js” was blocked because content blocking is enabled.[Learn More] store
The resource at “https://platform.twitter.com/oct.js” was blocked because content blocking is enabled.[Learn More] store
The resource at “https://js.adsrvr.org/up_loader.1.1.0.js” was blocked because content blocking is enabled.[Learn More] store
The resource at “https://connect.facebook.net/en_US/fbevents.js” was blocked because content blocking is enabled.[Learn More] store
The resource at “https://logitechlogitechglobal.112.2o7.net/b/ss/logitechlogitech-global/1/JS-2.9.0/s41886439896189?AQB=1&ndh=1&pf=1&t=19%2F11%2F2018%209%3A34%3A35%203%20-120&sdid=7B255BF38099AB50-50CA3E2462ADDC17&mid=21115105929955027740498115621889973271&aamlh=6&ce=UTF-8&g=https%3A%2F%2Fbuy.logitech.com%2Fstore%3FAction%3DDisplayEditProfilePage%26Env%3DBASE%26Locale%3Den_US%26SiteID%3Dlogib2c&cc=USD&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&v1=D%3Dmid&c2=https%3A%2F%2Fbuy.logitech.com%2Fstore%3FAction%3DDisplayEditProfilePage%26Env%3DBASE%26Locale%3Den_US%26SiteID%3Dlogib2c&v2=37443000&c3=Shopping%20Cart&c4=Account&v4=unauthenticated&c6=en-us&v6=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A66.0%29%20Gecko%2F20100101%20Firefox%2F66.0&c9=37443000&v11=https%3A%2F%2Fbuy.logitech.com%2Fstore%3FAction%3DDisplayEditProfilePage%26Env%3DBASE%26Locale%3Den_US%26SiteID%3Dlogib2c&c12=8&v12=Shopping&c14=100&v14=Shopping%20Cart&v15=Account&c22=https%3A%2F%2Fbuy.logitech.com%2Fstore%3FAction%3DDisplayEditProfilePage%26Env%3DBASE%26Locale%3Den_US%26SiteID%3Dlogib2c&v22=https%3A%2F%2Fbuy.logitech.com%2Fstore%3FAction%3DDisplayEditProfilePage%26Env%3DBASE%26Locale%3Den_US%26SiteID%3Dlogib2c&v26=AMER&v27=EN&v28=en-us&v29=US&s=1920x1080&c=24&j=1.6&v=N&k=Y&bw=1420&bh=966&mcorgid=970FAA6357F533BB0A495CC8%40AdobeOrg&AQE=1” was blocked because content blocking is enabled.[Learn More] store
The resource at “https://app.yieldify.com/yieldify/code.js?yieldify_id=5342&loca=https://buy.logitech.com/store?Action=DisplayEditProfilePage&Env=BASE&Locale=en_US&SiteID=logib2c” was blocked because content blocking is enabled.[Learn More] store
The resource at “https://secure.quantserve.com/quant.js” was blocked because content blocking is enabled.[Learn More] store
The resource at “https://www.googletagmanager.com/gtag/js?id=AW-818993388” was blocked because content blocking is enabled.[Learn More] store
The resource at “https://snap.licdn.com/li.lms-analytics/insight.min.js” was blocked because content blocking is enabled.[Learn More] store
The resource at “https://resources.xg4ken.com/js/v2/ktag.js?tid=KT-N3AA7-3EB” was blocked because content blocking is enabled.[Learn More] store

So these are the domains to test:
​drh.img.digitalriver.com
mboxedge26.tt.omtrdc.net
www.google-analytics.com
secure-ds.serving-sys.com
platform.twitter.com
js.adsrvr.org
connect.facebook.net
logitechlogitechglobal.112.2o7.net
app.yieldify.com
secure.quantserve.com
www.googletagmanager.com
snap.licdn.com
snap.licdn.com
resources.xg4ken.com

I opened the URL in a fresh browser profile (Firefox Nightly 66, uMatrix installed, normal mode) and loaded the page. The web elements were not fully loaded.

I disabled the Spoof Referrer option in uMatrix and then *WHITELISTED*:

digitalriver.com

After this, all the page elements were correctly displayed.
The other resources didn't help.

Umatrix screenshot link: http://prntscr.com/lwupdl

digitalriver.com can be found in disconnect-blacklist.json list.

So in conclusion:
digitalriver.com - Advertising = [tp-ads]

Comment 2

[Thomas Wisniewski [:twisniewski]]

This is indeed another instance of Digital River's CDN resources being blocked, similar to the situation discussed here: https://bugzilla.mozilla.org/show_bug.cgi?id=1483201#c5

Comment 3

[Raul Bucata]

This does not reproduce with ETP set to STANDARD.

Environment:
Operating System: Windows 10 PRO x64
Firefox Version: Firefox Nightly 86.0a1 (2021-01-20) (64-bit)

Notes:
Screenshot: https://prnt.sc/xcwngj

Comment 4

[Oana Arbuzov [:oanaarbuzov]]

Attachment: StrictVSStandard.png

The issue is also reproducible on URL: https://buy.logitech.com/store?Action=DisplayPage&Locale=sv_SE&SiteID=logib2c&id=ThreePgCheckoutShoppingCartPage

Tested with:
Browser / Version: Firefox Nightly 91.0a1 (2021-06-09), Firefox Release 89.0
Operating System: Windows 10 Pro

Comment 5

[Oana Arbuzov [:oanaarbuzov]]

The issue seems to be fixed, the "Login" page layout is displayed correctly with ETP - Strict enabled.
URL: https://buy.logitech.com/store?Action=DisplayEditProfilePage&Env=BASE&Locale=en_US&SiteID=logib2c
https://prnt.sc/j0LvKI64gT-U

Tested with:
Browser / Version: Firefox Nightly 103.0a1 (2022-06-03)
Operating System: Windows 10 Pro

Comment 6

[Oana Arbuzov [:oanaarbuzov]]

It seems that the issue was partially fixed, and it still occurs on URL: https://buy.logitech.com/store?Action=DisplayPage&Locale=sv_SE&SiteID=logib2c&id=ThreePgCheckoutShoppingCartPage
https://prnt.sc/igzSoqLj8B-S

Reopening the issue.