1586576 - Salesforce setup broken, fixed by disabling tracking protection

Status: RESOLVED FIXED

(Core :: Privacy: Anti-Tracking, defect)

Description

[Jesper Kristensen]

Steps to reproduce:

1. Log in as a system administrator in Salesforce https://login.salesforce.com/
2. Verify you are using their new Lightning Experience, not their old Salesforce Classic.
3. Go to Setup.
4. Go to almost any page in setup, for example Users > Roles.

Expected results:
The setup page is shown.

Actual results:
A blank page is shown, with two warnings saying that a popup has been blocked.

Technical details:
Salesforce has not yet converted most of their Setup pages from Classic to Lightning. If you go to setup in Lightning (https://<yourname>.lightning.force.com) it will i iframe the Classic setup page (https://<yourname>.my.salesforce.com). It seems like this iframe is blocked. It seems like Salesforce detects this block and instead tries to open the page in a popup. It seems like this popup is also blocked.

Workaround:
If I click the shield icon in the URL bar and click the button to disable tracking protection for this site, then the setup works as expected.

Version:
Using Firefox 69.0.2 for Windows with the default tracking protection (Standard)

Test account:
You can get a free account for testing at https://developer.salesforce.com/

Comment 1

[(no longer active)]

It seems that this recent change from Disconnect will fix this bug, Steven can you please confirm? Thanks!

Comment 2

[Tanvi Vyas[:tanvi]]

https://github.com/disconnectme/disconnect-tracking-protection/pull/93

Comment 3

[Peter Saint-Andre [:stpeter]]

I've followed up with :englehardt about this and I've also reached out to a contact at Cisco.

Comment 4

[Steven Englehardt [:englehardt]]

I can reproduce the issue described in Comment 0 with the exception of It seems like Salesforce detects this block and instead tries to open the page in a popup. It seems like this popup is also blocked.. If I disable my pop-up blocker the new tab is opened. I do have to re-login, but after that the window does appear (this is a terrible user experience however).

(In reply to :ehsan akhgari from comment #1)

It seems that this recent change from Disconnect will fix this bug, Steven can you please confirm? Thanks!

This commit will not fix the problem, as force.com is a "property" on this website and not a "resource". We will need (at least some of) the changes in https://github.com/disconnectme/disconnect-tracking-protection/pull/93. I've followed up on that PR asking for a review timeline.

Comment 5

[Peter Saint-Andre [:stpeter]]

This has been addressed by https://github.com/mozilla-services/shavar-prod-lists/pull/78

Comment 6

[Steven Englehardt [:englehardt]]

I've verified that this is now fixed.