1627395 - chat.whatsapp.com renders without styles (broken), if you have strict tracking protection enabled

Status: RESOLVED FIXED

(Core :: Privacy: Anti-Tracking, defect, P1)

Description

[Daniel Holbert [:dholbert]]

Attachment: screenshot of unstyled page

STR:

1. Enable strict tracking protection.
2. Visit https://chat.whatsapp.com/

ACTUAL RESULTS:
Page renders without styles, looking pretty broken.

EXPECTED RESULTS:
A working page.

Comment 1

[Daniel Holbert [:dholbert]]

The tracking-protection shield renders purple and says it blocked "Social Media Trackers" from static.xx.fbcdn.net. I'm guessing the stylesheet might be one of the blocked resources.

Comment 2

[Thomas Wisniewski [:twisniewski]]

They're using Facebook's CDN to serve the CSS and JS on their page, so we will need to proxy or whitelist https://static.xx.fbcdn.net/rsrc.php/v3/. Since WhatsApp is owned by Facebook, it seems reasonable to whitelist for user-initiated navigations to chat.whatsapp.com.

Comment 3

[Steven Englehardt [:englehardt]]

We can fix this by adding whatsapp.com to the Facebook entity. I've filed https://github.com/disconnectme/disconnect-tracking-protection/issues/165 for that, and will update this thread if/when that happens.

Comment 4

[Steven Englehardt [:englehardt]]

This was fixed by https://github.com/mozilla-services/shavar-prod-lists/pull/172