1538579 - No more 3-D Secure Payment Autorization pop-up on Firefox !

Status: NEW

(Core :: Privacy: Anti-Tracking, defect, P3)

Description

[Maicas]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0

Steps to reproduce:

I frequently make some online payments with Visa cards from my PC (Windows10) using Firefox. But, this week, it didn't work whatever shop I bought from or Visa cards I used.

Actual results:

The 3-D Secure Payment Autorization pop-up didn't show up.
Instead a blank page appeared.

Expected results:

The VerifiedByVISA windows should have opened and a code should have been sent on my mobile phone.

However it worked fine when using IE or Chrome.

Comment 1

[Matthias Versen [:Matti]]

Do you have an adblocker extension installed ?
You are still using Firefox65 and that means that Firefox didn't change this week.

Comment 2

[Maicas]

Yes, I have Adblock Plus installed but disabled it for the concerned sites.
And Yes still using Firefox65. I will update to 66 tomorrow.

Comment 3

[Matthias Versen [:Matti]]

Try Firefox options:"help/Restart with Add-ons disabled".

Comment 4

[Maicas]

Will be please to do so but I will then need to make an online payment with Visa card to see if it helps.

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

The priority flag is not set for this bug.
:overholt, could you have a look please?

Comment 6

[Andrew Overholt [:overholt]]

This isn't a payments thing. Could this be caused by tracking protection?

Comment 7

[Johann Hofmann [:johannh]]

Yeah, I've seen this happen with default cookie restrictions, too. What are the values of these prefs in about:config:

• privacy.trackingprotection.enabled
• network.cookie.cookieBehavior

for you? Thanks!

Comment 8

[(no longer active)]

Johann, could you please file a bug for the issue you've seen with some info on how to reproduce? I remember you had mentioned this before too and we never really looked into it... Thanks!

Comment 9

[Maicas]

Hi everybody !

1. "privacy.trackingprotection.enabled" AND "network.cookie.cookieBehavior" both have TRUE value.
2. Sorry, but I didn't keep any further data about this bug issue.
3. Altough I haven't since change anything except for the 66.03 update, the bug disappear as I could pay again online using the VerifiedByVISA. The 3-D secure payment autorization window pops-up normally now.

Comment 10

[(no longer active)]

Hmm, it is strange for "network.cookie.cookieBehavior" to have a TRUE value, it is an integer preference so I would expect its value to be a small number from 0 to 4. I would appreciate if you could double check the value of this preference when you got a chance. Thanks!

Comment 11

[Johann Hofmann [:johannh]]

(In reply to :Ehsan Akhgari from comment #8)

Johann, could you please file a bug for the issue you've seen with some info on how to reproduce? I remember you had mentioned this before too and we never really looked into it... Thanks!

To be honest I can't do much more than confirm this issue. I have no good way of reproducing 3D Secure I could share here. Back then I asked stpeter if he could set us up with a contact at Visa regarding this issue.

Peter, did we get anywhere with them? :)

Thanks!

Comment 12

[Maicas]

(In reply to :Ehsan Akhgari from comment #8)

"network.cookie.cookieBehavior" value is : 3

Comment 13

[Peter Saint-Andre [:stpeter]]

Our Visa friends told me of a test site we can use, but I'm not sure it is public. I'm verifying with Visa (as it were) and will report back soon. ;-) ~Peter

Comment 14

[(no longer active)]

(In reply to Maicas from comment #12)

(In reply to :Ehsan Akhgari from comment #8)

"network.cookie.cookieBehavior" value is : 3

Thanks very much.

That means block all third-party cookies. So we should double check whether this breakage happens with default settings or not. Breakage of this kind happening while blocking all third-party cookies is expected more or less...

Comment 15

[Maicas]

Obviously personal settings did not cause nor influence the problem because they were applied long time ago and were not modified since when the bug suddenly appeared and after a week suddenly disappeared.

Comment 16

[BugBot [:suhaib / :marco/ :calixte]]

The priority flag is not set for this bug.
:johannh, could you have a look please?

For more information, please visit auto_nag documentation.

Comment 17

[Johann Hofmann [:johannh]]

Not sure if we're still triaging...

Comment 18

[Xuan Luo]

Here is the website that I am having trouble with for this specific issue. And I am currently on 83.0a1 FF nightly.

https://www.xplant.co.kr/shop/overseas2.php

Comment 19

[Tomas]

Lately, I've noticed that the experience of using payment systems in browsers is getting smoother, but the disappearance of 3-D Secure pop-ups in Firefox does raise some concerns. Speaking of security and convenience, I recently came across a rather interesting site - 91 club download . They offer a variety of ways to earn, including games, promotions, and bonuses. Interestingly, they also pay a lot of attention to the security of user transactions, which is very relevant today. Perhaps this is one of the ways not only to earn but also to maintain confidence in the safety of your funds in the digital world.