1787150 - Page is blank on auth.meta.com with ETP set to Strict

Status: NEW

(Web Compatibility :: Privacy: Site Reports, defect, P3)

Description

[Calin Tanase]

Attachment: Auth Meta.png

Environment:
Operating system: Android 11 (ONEPLUS A6000)
Firefox version: Nightly 106.0a1-20220824093620

Preconditions:
• ETP set to STRICT
• Clean profile

Steps to reproduce:

1. Go to https://auth.meta.com/login
2. Observe the page.

Expected Behaviour:
The page loads correctly.

Actual Behaviour:
The page is blank.

Notes:

1. Screenshot provided.
2. Not reproducible with Standard ETP.
3. Same behaviour in Private.

Comment 1

[Thomas Wisniewski [:twisniewski]]

They're loading resources cross-site from https://static.xx.fbcdn.net/ which are blocked as trackers. Presumably we'll need to contact Disconnect to see if they can allow these requests from auth.meta.com (and perhaps other meta sites). Tim, I don't have the bandwidth to do that right now, do you mind looking into it?

Comment 2

[Tim Huang[:timhuang]]

I've filed the github issue. https://github.com/disconnectme/disconnect-tracking-protection/issues/301

Comment 3

[Daniel Lo Nigro (daniel15)]

Is there an ETA as to when this will be pulled into the Mozilla repo? I see there's an open PR here: https://github.com/mozilla-services/shavar-prod-lists/pull/591. Thanks!

Comment 4

[Daniel Lo Nigro (daniel15)]

Also, for users that use "Facebook Container", are any changes required to that extension to make it understand that meta.com is a Facebook domain and thus should be allowed in the container?