1797473 - "hubspot" button missing from websites created through hubspot.com with Standard Strict

Status: NEW

(Web Compatibility :: Privacy: Site Reports, defect, P3)

Description

[Calin Tanase]

Attachment: hubspot website.png

Environment:
Operating system: Mac OS X 10.15.7
Firefox version: Nightly 108.0a1 (2022-10-25)

Preconditions:
• Hubspot account created
• Website created through hubspot.com (it can be done for free)
• ETP set to STANDARD
• Clean profile

Steps to reproduce:

1. Go to https://hubspot.com
2. Login into your account.
3. Hover over "Marketing" located in the header.
4. Hover over "Website" from the drop-down menu.
5. Click on "Website Pages".
6. Hover over the website that you created.
7. Click "More".
8. Click "View".
9. Observe the behaviour on the page that opened in a new tab.

Expected Behaviour:
The "hubspot" button is displayed on the page.

Actual Behaviour:
The "hubspot" button is not displayed on the page.

Notes:

1. Screenshot provided
2. Reproducible on Firefox Release as well
3. Reproducible with both Standard and Strict ETP
4. Not reproducible with ETP Off
5. Same behaviour in Private

Comment 1

[Tim Huang[:timhuang]]

Both ETP and TCP will break this "hubspot" button. The button won't show up if the login cookie of hubspot.com is either blocked or partitioned. And we block cookie access of hubspot.com because it's a tracker.

The breakage doesn't affect the website's functionality, it just doesn't allow the hubspot shortcut to be able to use. People can still go the hubspot to edit the website if they want. FWIW, this is also broken in Safari.

Personally, I don't think there is a way for us to resolve this issue if the hubspot is categorized as a tracker by the Disconnect list. And I don't think they will remove this from their tracker list.

Comment 2

[Tim Huang[:timhuang]]

I cannot reproduce the same issue any more.

Calin, could you verify again? Thanks.

Comment 3

[Calin Tanase]

Sorry I can't verify this, my account was deactivated. I've also created 2 different accounts but shortly after setting them up, I keep getting deactivated for some reason. It keeps asking to verify my identity via an app called "Nametag".

Comment 4

[Dan Mehic]

Could you find out if someone else from QA can assist here? Thanks

Comment 5

[Calin Tanase]

Attachment: testcase reducer (Strict ETP)

Comment 6

[Calin Tanase]

Attachment: testcase reducer (ETP OFF)

I've managed to create a new account now using an outlook mail, not sure if the gmail account was the problem. I think ETP affects logins with google account as well.

Anyway, The issue is still reproducible. I've tried the testcase reducer with Strict , Standard and ETP OFF but for some reason the CSS is broken with Standard and ETP OFF. However the hubspot logo can still be seen on the test case reduced page with ETP OFF.

Comment 7

[Calin Tanase]

Attachment: Strict vs Standard vs ETP OFF.png

There are 2 buttons regarding hubspot, one which says the website was built on hubspot and one with hubspot tools (the logo inside the black square). As you can see on the screenshot both buttons are missing with Strict ETP. With Standard ETP only the button that says the website was built on hubspot and with ETP OFF both buttons are displayed.

Comment 8

[Calin Tanase]

Attachment: Console log (Strict ETP).txt

The console export is with Strict ETP. With ETP OFF there are no errors in the console, even after refreshing the page for a few times.

Comment 9

[Calin Tanase]

Attachment: Console log (Standard ETP)

Comment 10

[Dan Mehic]

Thank you!

Comment 11

[Tim Huang[:timhuang]]

Thanks for the testing. According to the testing result, it's an ETP strict-only issue because we block hubspot.com as an analytics tracker. The "hubspot" button displays properly in ETP standard.