1655865 - Strict ETP breaks Facebook domain e.gg

Status: VERIFIED FIXED

(Core :: Privacy: Anti-Tracking, defect, P1)

Description

[tvalde]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:78.0) Gecko/20100101 Firefox/78.0

Steps to reproduce:

e.gg is a new product by Facebook. Tracking protection breaks all CSS, JS, and images on this site. To repro, open https://e.gg with enhanced tracking protection enabled.

Related to #1614085 and #1590944.

Actual results:

CSS, JS, and images don't load. The console shows errors such as:

The resource at “https://static.xx.fbcdn.net/rsrc.php/v3/y7/l/0,cross/r-wtTsxl41S.css?_nc_x=Ij3Wp8lg5Kz” was blocked because content blocking is enabled.

Expected results:

CSS, JS, and images should load.

Comment 1

[tvalde]

I have submitted a PR to add e.gg to the list of Facebook properties in the Disconnect services list:
https://github.com/disconnectme/disconnect-tracking-protection/pull/222

Comment 2

[Steven Englehardt [:englehardt]]

I can reproduce with Strict

Comment 3

[Steven Englehardt [:englehardt]]

@tvalde Thanks for the detailed report and submission to Disconnect. That makes my life easy :). I'll let them know this leads to breakage in Firefox.

Comment 4

[tvalde]

https://github.com/disconnectme/disconnect-tracking-protection/pull/222 has been resolved

@englehardt - what is the usual timeline for rolling out a change like this to Firefox users?

Comment 5

[Steven Englehardt [:englehardt]]

This was fixed by https://github.com/mozilla-services/shavar-prod-lists/pull/295. It should now be live for all Firefox users.

Comment 6

[tvalde]

Awesome, thanks! Just verified that it is fixed.