1727831 - www.levi.cl doesn't load with with ETP set to STRICT

Status: NEW

(Core :: Privacy: Anti-Tracking, defect, P3)

Description

[Ksenia Berezina [:ksenia]]

To reproduce visit https://www.levi.cl/ in Firefox Nightly 93.0a1 (2021-08-26) with ETP set to Strict and observe the site.

The issue seem to be caused by blocking io.vtex.com.br:

The resource at “https://io.vtex.com.br/front-libs/jquery/1.8.3/jquery-1.8.3.min.js?v=1.5.7.2374” was blocked because content blocking is enabled.
The resource at “https://io.vtex.com.br/rc/rc.js?v=1.5.7.2374” was blocked because content blocking is enabled.
The resource at “https://io.vtex.com.br/portal-ui/v1.14.7/scripts/vtex-events-all.min.js?v=1.5.7.2374” was blocked because content blocking is enabled.
The resource at “https://io.vtex.com.br/portal-ui/v1.14.7/scripts/vtex-analytics.js?v=1.5.7.2374” was blocked because content blocking is enabled.
The resource at “https://io.vtex.com.br/front-libs/front-i18n/0.7.2/vtex-i18n.min.js?v=1.5.7.2374” was blocked because content blocking is enabled.

Comment 1

[Tim Huang[:timhuang]]

Changing severity to S3 because this is a TP issue on Strict mode.

Comment 2

[Thomas Wisniewski [:twisniewski]]

Yes, this is because io.vtex.com.br is considered a tracker. I believe our only realistic option here will be to allow users to opt into those resources if they're willing, but that will require coming up with an appropriate user interface to notify users and let them opt in (so that they do not have to drop out of all tracking protection using the shield icon).