1604122 - Flyer from flipp.com are not displayed when ETP-Strict is enabled

Status: NEW

(Core :: Privacy: Anti-Tracking, defect, P3)

Description

[Oana Arbuzov [:oanaarbuzov]]

Attachment: Screenshot_1.jpg

Environment
Browser / Version: Firefox Preview Nightly 191211 (🦎: 72.0a1-20191211094640)
Operating System: Huawei P20 Lite (Android 8.0.0) - 1080 x 2280 pixels, 19:9 ratio (~432 ppi density)

Steps to Reproduce:
1. Navigate https://flipp.com/flyers
2. Observe the flyer.

Expected Behavior:
Flyer image is displayed.

Actual Behavior:
Flyer image is not displayed.

Note
1. Not reproducible on Chrome 78.0.3904.108 and Firefox Nightly 68.4a1 (2019-12-12)
2. With "Standard" protection the flyer are displayed on Firefox Preview Nightly
3. Screenshot attached.

Comment 1

[Thomas Wisniewski [:twisniewski]]

It looks like allowing access to images files from images.wishabi.net and f.wishabi.net is doing the trick. While I do see track.gif files served from a.wishabi.net and b.wishabi.net, I only see merchant logos and flyer images from the other domains so far. Still, we might want to proxy these, or at least isolate them into their own containers and strip referrer and other headers.

Comment 2

[Oana Arbuzov [:oanaarbuzov]]

The issue still occurs on my side, with ETP - Strict the flyer does not load.
https://prnt.sc/y14itn

Tested with:
Browser / Version: Firefox Nightly 210201 (🦎 87.0a1-20210129095945)
Operating System: Samsung Galaxy S8 (Android 9) - 1440 x 2960 pixels, 18.5:9 ratio (~570 ppi density)