1753590 - https://threadreaderapp.com does not work correctly with ETP set to STRICT

Status: RESOLVED FIXED

(Web Compatibility :: Privacy: Site Reports, defect, P3)

Description

[Frank]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:96.0) Gecko/20100101 Firefox/96.0

Steps to reproduce:

Attempting to unravel and twitter thread by using https://threadreaderapp.com leads to a result without showing images. Works in other browsers.

Actual results:

No images shown

Expected results:

Images should be shown.

Comment 1

[Raluca Popovici, Desktop QA]

Attachment: image_2022_02_07T15_35_40_881Z.png

Comment 2

[Raluca Popovici, Desktop QA]

Attachment: image_2022_02_07T15_36_24_397Z.png

Comment 3

[Raluca Popovici, Desktop QA]

Hello,
I have tried to reproduce the issue with Win 10x64 with Firefox 96.0 and 98.0a1(2022-02-07), unfortunately I wasn't able to reproduce it and I have given my results as per the attached images.

Could you please answer the following questions in order for us to investigate it further.

Does this issue happen with a new profile? Here is a link on how to create one: https://support.mozilla.org/en-US/kb/profile-manager-create-remove-switch-firefox-profiles
Does this issue happen in the latest nightly? Here is a link from where you can download it: https://www.mozilla.org/en-US/firefox/channel/desktop/
Do you have any addons installed if so can you list them?

Comment 4

[Frank]

On a new profile, this issue does not happen.

If returning to the regular default profile, and if I disable all add-ons on , the issue remains.

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::DOM: Security' component, and is moving the bug to that component. Please revert this change in case you think the bot is wrong.

Comment 6

[Daniel Veditz [:dveditz]]

The twitter images are being blocked by tracking protection. I don't know if we can make a back-end exception for threadreader app or if you need to make one for yourself, but it's definitely the same domain that twitter does use for social tracking.

It's possible the tracking protection team will be able to distinguish between user images and "twitter" images base on URL path?

Comment 7

[Emma Zühlcke [:emz]]

I can reproduce the issue with "strict" ETP enabled. On "standard" the tweets load properly.
To confirm, do you have strict tracking protection enabled and does it fix the issue if you switch to standard? Here is an article on how to update this setting.

(In reply to Daniel Veditz [:dveditz] from comment #6)

The twitter images are being blocked by tracking protection. I don't know if we can make a back-end exception for threadreader app or if you need to make one for yourself, but it's definitely the same domain that twitter does use for social tracking.

It's possible the tracking protection team will be able to distinguish between user images and "twitter" images base on URL path?

That's an interesting idea. Unfortunately our tracking protection block lists are domain based so we can't distinguish between paths. Disconnect classifies all of twimg.com as a tracker. Also see https://github.com/disconnectme/disconnect-tracking-protection/issues/60

Comment 8

[William Wen (:wwen)]

Fixed by SmartBlock Embeds (Bug 1901602)