1644008 - alt+d and duckduckgo when privacy.resistFingerprinting is true

Status: NEW

(Core :: Privacy: Anti-Tracking, defect, P5)

Description

[menaquinone]

Attachment: wtw.wmv

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0

Steps to reproduce:

1. search for something with duckduckgo from address bar
2. after you see the results, press alt+d

Actual results:

the duckduckgo results page navigates to a different page, as if it sensed that I pressed alt+d somehow
and the address bar gets focused

Expected results:

the address bar gets focused, but without letting duckduckgo know that I pressed alt+d to focus it, thereby not allowing duckduckgo to navigate to a new webpage

Comment 1

[Andre Klapper]

Cannot reproduce using 77.0.1 on Fedora. Does that still happen in a fresh user profile with no add-ons and extensions?

Comment 2

[menaquinone]

Thank you for trying.

Yes, it does happen in empty/new profile with no addons, BUT ONLY if you also set the following:

in about:preferences#search
under Default Search Engine
set: DuckDuckGo

in about:config
set:
privacy.resistFingerprinting true
(default was false)

then it can be replicated, see the new attached video.

Note: you have to be in Windows (maybe Windows 7 64bit like I am), it may not work under Linux(I don't have Fedora to try it on), I've no idea.
I tested Firefox 78.0b3 (64-bit)

Comment 3

[menaquinone]

Attachment: imonWindows.wmv

Comment 4

[menaquinone]

if I press just "d" instead of "alt+d" it has the same effect (except of course it doesn't also focus my address bar), so it must be that duckduckgo is sensing that "d" when I press alt+d, but only when privacy.resistFingerprinting true

Comment 5

[menaquinone]

Attachment: howto.wmv

Comment 6

[Tom Ritter [:tjr]]

We muck with modifier keys in RFP mode, so I am not surprised this is happening. Hopefully we can find a way to improve behavior in the future.

Comment 7

[Thorin [:thorin]]

Here's a great key test page (which replicates the issue)

• https://rawgit.com/jeresig/jquery.hotkeys/master/test-static-01.html
• RFP off, load test, alt-d = working
• RFP on, reload ttest, alt-d = not working

Comment 8

[Jeronimo Torti (Please send NI request to Brindusa Tot)]

Hi,

Thanks for submitting this bug to us!

Despite I set the required conditions, I was unable to reproduce this issue on my end, I tried on Windows 10, with Firefox Nightly 80.0a1 (2020-07-06) (64-bit) and Release version 78.0.1 (64-bit).

Thanks in advance. I've already chosen a component for this bug in hope that someone with more expertise may look at it. We'll await their answer.

Regards,
Jerónimo.

Comment 9

[Drew Willcoxon :adw]

I can reproduce this on Windows 10. This isn't about the address bar but about how Firefox allows DDG to see the d key when privacy.resistFingerprinting is true. So I'll move this to Privacy: Anti-tracking. Apologies if that's not the right place either -- if it is wrong, maybe DOM: Events?